connect[.]spendtym[.]com

The domain connect.spendtym.com was registered on June 12, 2024 through Name.com, Inc. and remains active as of the reporting date, July 12, 2026. The sole page title observed matches the fully qualified domain name, providing no additional context about the intended victim or lure. No SSL certificate is presented, and HTTP requests return a 200 status code, indicating the site is serving content over an unencrypted channel.

Infrastructure analysis shows that the domain resolves to the IPv4 address 93.117.131.242, which is assigned to AS8926 Moldtelecom SA and geolocated in Moldova (MD). The domain is delegated to four name servers—ns1bqx.name.com, ns2jqz.name.com, ns3flt.name.com, and ns4gvx.name.com—suggesting a relatively distributed DNS configuration that may be used to increase resilience against takedown efforts.

Reputation services flag the domain as highly suspicious: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser reports a score of 1 out of 100. VirusTotal analysis shows that 13 out of 95 security vendors have flagged the domain for malicious activity. The domain is currently listed on two public blocklists and is actively blocked by PhishDestroy and PhishingDB, reinforcing confidence in its malicious nature.

Given the combination of low trust scores, multiple vendor detections, and inclusion on established phishing blocklists, defenders should treat connect.spendtym.com as a high‑risk phishing infrastructure. Recommended actions include immediate DNS or URL filtering to prevent resolution, network traffic blocking at the firewall level for the resolved IP address, and continuous monitoring for any changes in hosting or certificate status. Organizations should also educate users about the lack of HTTPS and the generic nature of the site title, as these are common indicators of fraudulent pages designed to harvest credentials or other sensitive information.