ny[.]pqpayuvl[.]cc

The domain ny.pqpayuvl.cc is currently listed as active phishing infrastructure. It was registered on June 12 2026 through Dominet (HK) Limited, a registrar based in Hong Kong, indicating a newly created asset. DNS resolution points to IP address 172.67.204.136, which belongs to Cloudflare’s network and is commonly used by threat actors to obscure the origin of malicious servers. The domain is blocked by the PhishDestroy service and appears on a single external security blocklist, showing that at least one third‑party filter has observed malicious activity associated with it.

VirusTotal analysis shows that 10 of 91 scanned security vendors have classified the domain as malicious, providing independent corroboration of its threat status. No additional public indicators such as Safe Browsing entries, Open Threat Exchange reports, SSL certificate details, HTTP status codes, or trust‑score metrics are presently available, leaving the exact delivery method and content of the site uncertain. Given the lack of disclosed SSL information, it is unclear whether the site employs HTTPS, which could affect interception capabilities. The single blocklist listing suggests limited visibility, but the multiple VirusTotal detections indicate active distribution.

Defenders should treat ny.pqpayuvl.cc as a confirmed phishing vector. Immediate actions include adding the domain to network‑level blocklists, enforcing DNS sink‑hole rules, and monitoring for outbound connections to the associated IP. Organizations should also review email gateway logs for references to ny.pqpayuvl.cc and alert users about unsolicited communications that reference the domain or related URLs. Continuous re‑evaluation is advised as further evidence—such as page titles, brand targeting, or additional vendor detections—may emerge in future scans.