michigan[.]safety-payit[.]vip

The domain michigan.safety-payit.vip is currently classified as a generic phishing site with an elevated risk rating and remains active as of the report date, July 29, 2026. Registration data shows the domain was created on June 12, 2026 and was registered through Gname.com Pte. Ltd., a registrar known to host a variety of commercial and malicious domains. Threat intelligence indicates that the domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, confirming its use in phishing campaigns.

VirusTotal scans have returned 12 positive detections out of 91 security vendors, demonstrating a moderate level of consensus among scanning engines that the domain hosts malicious content. No additional public indicators such as IP address, hosting ASN, SSL certificate details, HTTP response codes, or page title have been published, leaving the underlying infrastructure and payload characteristics unverified.

Analysts should therefore treat the domain as malicious, enforce network-level blocks, update DNS filtering policies to include the domain, and monitor for any related command-and-control activity. Continuous re‑evaluation is advised as further technical artifacts become available, especially any observed payloads, credential‑harvesting pages, or associated infrastructure that could refine the threat profile.