psxloot[.]com

This domain, psxloot.com, is identified as a phishing infrastructure impersonating PlayStation Network (PSN) to distribute fraudulent gift code offers. Analysis of the page title, 'PSXloot - Codes PSN,' confirms the site's intent to deceive users into believing they will receive legitimate PSN codes, a common tactic in credential harvesting and financial fraud campaigns. No specific drainer kit signatures were observed, but the use of particles.js, Bootstrap, and jQuery suggests a templated phishing framework designed for rapid deployment and scalability. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 07, 2026, through Global Domain Group LLC, and resolves to the IP address 185.111.111.154. Security vendor detections on VirusTotal stand at 6 out of 95, indicating moderate but inconsistent identification across platforms. The domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, further corroborating its malicious classification. Google Safe Browsing (GSB) data is not explicitly provided, but the domain's offline status suggests it may have been flagged or removed proactively. As of the latest assessment, psxloot.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the infrastructure remains a residual risk, as threat actors frequently reuse IPs, registrars, and hosting patterns for subsequent campaigns. Users who interacted with the site should assume credential exposure and initiate password resets for associated accounts, particularly those linked to gaming or financial services. Organizations are advised to monitor for related domains registered through the same registrar or resolving to the identified IP, as these may indicate follow-up phishing operations.