# psxloot.vip — SUSPICIOUS

> PhishDestroy warns that psxloot.vip is a live PSX credential-phishing site only 1/95 vendors detect. Check the full report.

## Summary
PhishDestroy identifies psxloot.vip as an active PlayStation credential-phishing domain designed to harvest Sony PSX account credentials. This impostor site masquerades as a legitimate PlayStation rewards or game-loot portal, tricking users into entering their PSN usernames and passwords. Traffic to the domain is redirected from spoofed emails, malvertisements, and compromised social-media posts that promise free PlayStation Store codes, DLC, or beta access. Once credentials are captured, threat actors gain full account control, enabling unauthorized purchases, data theft, and potential account takeovers.  This domain exhibits multiple red flags confirmed by PhishDestroy’s threat-intelligence pipeline. VirusTotal analysis reveals only 1 of 95 participating security vendors currently detect psxloot.vip as malicious, underscoring low early-stage detection and high evasion. The domain was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar historically linked to bulk domain registrations and bulletproof hosting workflows. The site resolves to IP 209.112.89.200, a netblock associated with prior credential-phishing and malware campaigns. Despite using a valid Let’s Encrypt SSL certificate, the mismatch between the certificate’s subject and the impersonated PlayStation brand further exposes the site’s fraudulent nature.  If you visited psxloot.vip or entered any credentials, immediately change your PlayStation Network password and enable two-step verification via the official PlayStation website or app. Review recent purchase history and revoke any unauthorized permissions. Clear browser cookies and run a full antivirus scan. Report the domain to your email provider or security software and avoid similar lures promising free PlayStation content.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-27 10:18:58
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 209.112.89.200

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fcb4bbb1-ee08-4ef9-b2da-f840b23a1bac
- PhishDestroy: https://phishdestroy.io/domain/psxloot.vip/
- LLM endpoint: https://phishdestroy.io/domain/psxloot.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/psxloot.vip/
Last updated: 2026-03-28