jayapayment[.]com

PhishDestroy identifies jayapayment.com as a live drainer-kit phishing domain masquerading as a payment portal. The site attempts to harvest wallet credentials under the guise of processing transactions. Brand abuse is likely opportunistic, targeting users expecting legitimate payment flows. No affiliation with a known brand or drainer-as-a-service kit has been confirmed at this stage; the threat vector is isolated to this single domain.

This domain was flagged by PhishDestroy with a VirusTotal detection score of 1/95 and remains undetected by major scanners. It resolves to IP 104.18.15.83 and was created on August 08, 2023, via GoDaddy.com, LLC. The site holds a valid SSL certificate issued by Google Trust Services but has not yet propagated to any public blocklists, indicating a newly active campaign with minimal historical footprint.

Jayapayment.com remains active and under live investigation; the current risk level is marked as under_investigation. Users are advised to avoid interacting with the domain and to report any encounters immediately. Despite the absence of blocklist entries and low VT coverage, the combination of recent registration, valid SSL, and drainer-kit behavior elevates the risk to probable high. PhishDestroy continues to monitor for infrastructure shifts or payload changes and urges caution when encountering unsolicited payment links.