ny[.]pqpaylxz[.]cc

The domain ny.pqpaylxz.cc was registered on June 12, 2026 through Dominet (HK) Limited, a registrar based in Hong Kong. DNS resolution points to the IPv4 address 188.114.97.3, which is the sole host observed for this indicator. VirusTotal analysis shows that five of ninety‑one security vendors have flagged the domain as malicious, indicating a moderate level of consensus among scanners. The domain also appears on a single external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform has taken mitigation action.

The threat classification is listed as generic phishing with an elevated risk rating, and the operational status is marked as active as of the report date, July 29, 2026. No additional public intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is currently available, so the exact content and lure technique remain unverified. Consequently, analysts cannot confirm the specific credential‑harvesting vector or targeted brand without further page‑level inspection.

Defenders should add ny.pqpaylxz.cc to deny‑list rules at network perimeter and endpoint filtering layers, and enforce DNS sink‑holing for the associated IP address 188.114.97.3. Continuous monitoring of DNS queries for this domain and periodic re‑scanning with updated VirusTotal or similar multi‑engine services is recommended to capture any changes in detection posture. Given the recent registration date, the domain may still be in an early deployment phase, so early containment can prevent potential credential theft campaigns from gaining traction.