mfpaysopl[.]com

This domain is flagged as a high-risk generic phishing threat as of July 14, 2026. Infrastructure analysis shows the domain was registered on March 30, 2026, through GoDaddy.com, LLC, and uses nameservers ns63.domaincontrol.com and ns64.domaincontrol.com. It resolves to IP address 160.153.0.119. VirusTotal data indicates 7 of 91 security vendors flag the domain as malicious, supporting the high-risk classification. The domain remains active, meaning the phishing operation is still accessible. The exact brand or page content has not been analyzed; the threat is categorized broadly as generic phishing. Defenders should block the domain at the network level, monitor for any associated subdomains or new IP resolutions, and review logs for any connections or credential submissions to this domain. Given the active status and vendor detections, immediate containment is recommended to prevent potential credential theft or further compromise.