about-paybadtzz[.]com

about-paybadtzz.com is a QR code phishing domain that was flagged by 23 out of 92 vendors on VirusTotal. Google Safe Browsing also marked it as malicious, and it is currently listed on one public blocklist, specifically PhishDestroy. The domain was registered through Aceville Pte. Ltd. and hosted on a Google Cloud server in the United States. The SSL certificate was issued by TrustAsia Technologies, Inc. The site is now offline.

The domain's page title, written in Japanese, suggests it was targeting Japanese-speaking users, urging them to scan a QR code. This tactic is often used to redirect users to malicious sites or to capture sensitive information. The platform risk score for about-paybadtzz.com is notably high at 83 out of 100, indicating a significant threat level during its active period.

PhishDestroy identified about-paybadtzz.com on the same day it was created, highlighting the efficiency of our detection pipeline in capturing threats before they propagate through antivirus databases. This early detection is crucial, as phishing domains often exploit the window between registration and widespread detection to maximize their impact. Despite the domain's takedown, its initial activity underscores the persistent threat posed by QR code phishing schemes.