# merchant.jayapayment.com — SUSPICIOUS

> merchant.jayapayment.com masquerades as a legitimate payment service, flagged by 0/95 VirusTotal scanners.

## Summary
PhishDestroy identifies merchant.jayapayment.com as a currently active domain posing as a generic financial/payment service, designed to harvest user credentials under false pretenses.

This malicious site currently exhibits a low detection profile on VirusTotal, with 0 out of 95 vendors flagging it as malicious. The domain is hosted on IP address 104.18.14.83, registered through GoDaddy.com, LLC on August 8, 2023. The infrastructure leverages a Google Trust Services SSL certificate, which may lend false credibility unless scrutinized for domain alignment or certificate transparency anomalies.

Given the high-risk nature of the threat—credential harvesting under a false “payment processing” identity—and its low initial detection rate, immediate containment measures should be applied. Analysts are advised to block traffic to this domain at the firewall, update blocklists (e.g., DNS sinkholes), and search endpoint telemetry for historical or ongoing connections. Users should be warned via awareness campaigns to avoid interacting with this domain and report any accidental access. Further intelligence collection is underway to determine propagation vectors and campaign scope.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-08-08 01:38:26
- Registrar: GoDaddy.com, LLC
- IP: 104.18.14.83

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c7b935fd-b7ec-4335-9b68-0eafa3ba2d81
- PhishDestroy: https://phishdestroy.io/domain/merchant.jayapayment.com/
- LLM endpoint: https://phishdestroy.io/domain/merchant.jayapayment.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/merchant.jayapayment.com/
Last updated: 2026-03-24