state[.]zeqpay[.]cc

Analysis of state.zeqpay.cc shows that the domain was registered on September 22, 2025 through Dominet (HK) Limited. The domain resolves to the IPv4 address 188.114.97.3, which is currently listed on one public security blocklist and is actively blocked by the PhishDestroy sinkhole. VirusTotal reports five detections out of ninety‑one scanned scanners, indicating that multiple anti‑malware engines have flagged the host as malicious.

The domain is classified as a generic phishing site and is marked as active with an elevated risk rating. The available evidence does not include a published page title, SSL certificate details, HTTP response codes, or any public threat‑intel feeds such as OTX, limiting visibility into the exact payload or lure used. Defenders should treat any traffic to state.zeqpay.cc as hostile.

Immediate mitigation steps include adding the domain and its resolving IP address to outbound deny lists, updating DNS filtering policies, and ensuring that endpoint protection solutions are configured to block the five VirusTotal‑identified signatures. Continuous monitoring of the IP address for new associations and periodic re‑query of VirusTotal and blocklist sources are recommended to capture any changes in the threat posture. Organizations with email gateways should also enforce URL reputation checks to prevent users from following links that resolve to this domain.