ny[.]pqpayfvr[.]cc

ny.pqpayfvr.cc was registered on June 12, 2026 through Dominet (HK) Limited and began resolving to the IPv4 address 188.114.96.3 shortly thereafter. The domain is currently flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one trusted feed has categorized it as malicious. VirusTotal analysis shows that six of ninety‑one AV engines returned a positive detection for the domain, confirming the presence of known phishing indicators. The risk rating assigned by the reporting system is elevated, and the status is marked active, meaning the infrastructure is still reachable.

Infrastructure analysis reveals a single A‑record pointing to 188.114.96.3, a host that is often associated with fast‑flux and short‑lived malicious services. No TLS certificate details, HTTP status codes, or page‑title information are publicly available, so the content of the site remains unverified. However, the combination of recent registration, rapid deployment, multiple blocklist listings, and multi‑vendor detections strongly suggests that the domain is being used for generic phishing campaigns.

Defenders should add ny.pqpayfvr.cc to DNS‑based blocklists, enforce outbound filtering for the associated IP address, and monitor network traffic for any connections to the host. Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture any evolution in the payload. Incident response teams should treat any credential submissions to this domain as compromised and initiate appropriate user notifications and credential resets.