# everypayback.com — SUSPICIOUS

> everypayback.com lures users with fake cashback offers. This cashback phishing site, registered March 20, 2026 via MAT BAO CORPORATION, is hosted on IP 188.114.

## Summary
PhishDestroy identifies everypayback.com as an active generic phishing domain currently under investigation. This domain poses as a cashback rewards program to harvest login credentials and financial details from unsuspecting users.

This domain was flagged by 0 of 95 VirusTotal vendors, registered through MAT BAO CORPORATION, resolves to IP 188.114.97.3, and was created on March 20, 2026. It currently shows no blocklist presence and has neutral trust scores across multiple threat intelligence platforms.

everypayback.com remains active and should be considered dangerous. Users are advised to avoid the domain entirely, verify any cashback offers through official brand channels, and report encounters to their cybersecurity teams or trusted threat intelligence platforms. Blocking the domain at DNS and network levels is strongly recommended to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-20 21:25:28
- Registrar: MAT BAO CORPORATION
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/18e0b76c-6936-4800-a070-c83388c94de1
- PhishDestroy: https://phishdestroy.io/domain/everypayback.com/
- LLM endpoint: https://phishdestroy.io/domain/everypayback.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/everypayback.com/
Last updated: 2026-03-20