# pay1tube.com — SUSPICIOUS

> pay1tube.com is a newly registered fake payment portal phishing domain posing as YouTube. Users should avoid it and scan devices if visited.

## Summary
PhishDestroy identifies pay1tube.com as an active phishing campaign impersonating a payment portal for YouTube services. This domain, created on October 13, 2025, is designed to deceive users into submitting sensitive payment credentials under the guise of a legitimate YouTube payment gateway. The threat is particularly insidious due to its recent registration and the use of a Google Trust Services SSL certificate, which may lend false legitimacy to the site.  This domain was flagged for its malicious intent, with 0 detections on VirusTotal as of the latest scan. It resolves to IP 188.114.96.3 and was registered through HOSTINGER operations, UAB. The domain has not yet been widely blocklisted, increasing the risk of exposure to unsuspecting users. The combination of a recently registered domain, low detection rates, and the use of a reputable SSL certificate underscores the need for heightened vigilance.  If you have visited pay1tube.com, immediately cease any interaction with the site and disconnect from the internet. Scan your device for malware using a trusted antivirus tool and review any entered credentials for potential compromise. Report the domain to your IT security team or relevant cybersecurity authorities to aid in blocking efforts. Avoid clicking any links or downloading files from this domain to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-10-13 14:35:29
- Registrar: HOSTINGER operations, UAB
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/be146a63-f6a8-4809-a9cf-bf1c19ad159d
- PhishDestroy: https://phishdestroy.io/domain/pay1tube.com/
- LLM endpoint: https://phishdestroy.io/domain/pay1tube.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pay1tube.com/
Last updated: 2026-04-11