ny[.]pqpayfvt[.]cc

Analysis indicates that the second‑level domain ny.pqpayfvt.cc was registered on 12 June 2026 through Dominet (HK) Limited, a registrar known to host malicious infrastructure. The domain resolves to the IPv4 address 188.114.96.3, which is currently listed on at least one public security blocklist. Independent threat‑intelligence feeds have recorded the domain as blocked by PhishDestroy, confirming that it is being actively mitigated by at least one anti‑phishing service. VirusTotal scans show that 10 of 91 security vendors have flagged the domain as malicious, providing additional corroboration of its hostile intent. The detection count, combined with the blocklist entry, places the domain in an elevated risk tier.

No publicly available SSL certificate information, HTTP response codes, or page‑title metadata have been released for this host, leaving the exact content of the site unverified. Consequently, the specific phishing lure, target brand, or credential‑harvesting technique employed by the site cannot be confirmed at this time. Defenders should treat ny.pqpayfvt.cc as a hostile resource. Recommended mitigation steps include adding the domain and its resolved IP address (188.114.96.3) to network‑level deny lists, updating DNS filtering policies, and configuring endpoint protection solutions to block any outbound connections to the address.

Continuous monitoring of the registrar Dominet (HK) Limited for new registrations that share similar naming patterns may help identify future campaigns. Because the domain is newly created, threat actors may still be in the early stages of distribution; rapid response to any observed traffic can reduce exposure. Organizations that rely on email filtering should ensure that inbound messages containing links to ny.pqpayfvt.cc are quarantined or rejected, and users should be educated to avoid clicking unknown short‑domain URLs.