conneactwalletts[.]gitbook[.]io

Analysis of conneactwalletts.gitbook.io indicates an active crypto drainer campaign with a high risk rating. The domain was created on 30 March 2014 and is currently served through Cloudflare, Inc., using the Google Trust Services / WE1 certificate. DNS resolution points to IP 104.18.40.47, belonging to AS13335 Cloudflare in the United States, with authoritative nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. HTTP requests receive a 307 temporary redirect, and the site presents the page title “Connect Wallet® - Secure & User‑friendly Wallet - | us”, suggesting the intent to lure users into a wallet interaction flow. Security telemetry shows the domain appears on one blocklist, has been flagged by Google Safe Browsing for social engineering, and is listed by PhishDestroy. VirusTotal reports 18 of 95 scanned vendors rating the domain as malicious, while Gridinsoft assigns a trust score of 0/100. Detected technologies include Cloudflare and HTTP/3. No additional content analysis is available beyond the title. Defenders should block the domain at network perimeter and endpoint filters, monitor DNS queries for the associated IP and nameservers, and incorporate the indicator set into threat‑intelligence feeds. Ongoing observation is advised to capture any evolution of the payload or additional infrastructure.