# xpresspaypoint.com — SUSPICIOUS

> xpresspaypoint.com is a credential theft domain flagged by 0 of 95 VirusTotal vendors. Registered via Dynadot, this active phishing site mimics Xpress PayPoint.

## Summary
PhishDestroy identifies xpresspaypoint.com as an active credential theft domain currently under investigation for impersonating Xpress PayPoint services. The domain is classified as a generic phishing site with a status of active, indicating ongoing malicious operations.  xpresspaypoint.com was registered on March 16, 2026, through Dynadot Inc. and resolves to the IP address 198.251.84.200. The domain utilizes a Let's Encrypt SSL certificate for authenticity. As of the latest scanning, VirusTotal reports 0 detections out of 95 vendors, suggesting it remains undetected by most security solutions. No confirmed blocklist entries or trust scores are currently documented for this domain.  Due to the domain's active status and potential for credential theft, users are strongly advised to avoid interaction and report any suspicious activity. Security teams should monitor for connections to the associated IP address and consider proactive blocking measures. If credential exposure is suspected, immediately reset passwords and enable multi-factor authentication on relevant accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-16 19:20:26
- Registrar: Dynadot Inc
- IP: 198.251.84.200

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a4376ba9-3ba0-49fd-84f5-6a8a52a74e4d
- PhishDestroy: https://phishdestroy.io/domain/xpresspaypoint.com/
- LLM endpoint: https://phishdestroy.io/domain/xpresspaypoint.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xpresspaypoint.com/
Last updated: 2026-03-23