iskapay[.]com

iskapay.com is currently under investigation as an active credential harvesting domain posing as a legitimate payment service provider. The threat involves the unauthorized collection of user login credentials and financial data through deceptive web forms. PhishDestroy has identified this domain as a high-risk phishing resource actively targeting unsuspecting users.

This domain was flagged by 1 of 95 VirusTotal vendors as of the latest update, indicating that although undetected by most antivirus engines, it remains a latent threat. Additionally, iskapay.com resolves to IP address 188.114.97.3, was registered through HOSTINGER operations, UAB on May 25, 2025, and holds an SSL certificate issued by Google Trust Services. The domain’s recent creation date and lack of blocklist presence suggest a potentially emerging threat vector that requires immediate attention.

As the investigation remains ongoing, PhishDestroy advises users to avoid accessing iskapay.com and to report any encountered phishing attempts related to this domain. Organizations should implement network-level blocking of the associated IP address (188.114.97.3) and monitor for related domains registered through HOSTINGER operations, UAB. Users who may have interacted with this domain are urged to change their credentials immediately and enable multi-factor authentication where applicable. Continuous monitoring and proactive blocking measures are recommended to mitigate potential credential theft and financial fraud.