com-payslq[.]vip

PhishDestroy identifies com-payslq.vip as a credential theft phishing domain designed to harvest user login credentials through deceptive login portals. This site does not appear to impersonate a specific major brand but instead relies on generic payment or account verification lures to trick victims into submitting sensitive information. No direct evidence of a crypto drainer kit has been observed, though credential theft can enable subsequent financial fraud or unauthorized access to cryptocurrency wallets. Technical indicators confirm the domain’s malicious nature. VirusTotal reports 12 out of 95 security vendors flagging com-payslq.vip as malicious, with detection labels including phishing and fraud. The domain was registered through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains, and resolves to the IP address 172.67.194.160, which is hosted on Cloudflare’s network—a common tactic to obscure the true origin of phishing infrastructure. While the domain’s creation date is not provided in the available data, its presence on multiple blocklists and absence from Google Safe Browsing (GSB) further corroborates its malicious classification. No legitimate content or services are associated with this domain. As of the latest assessment, com-payslq.vip has been taken offline, likely in response to security vendor reports or hosting provider intervention. However, the elevated risk remains for users who may have interacted with the site before its removal, particularly if credentials were entered or personal data was submitted. Affected individuals should immediately change passwords for any accounts accessed via the site, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. Users are advised to verify the authenticity of any website requesting sensitive information, especially those with unusual domain names or unsolicited login prompts. While the domain is currently inactive, threat actors may re-deploy similar infrastructure under new domains, necessitating ongoing vigilance.