bzst[.]com-payyd[.]my

Analysis indicates that the domain bzst.com-payyd.my was registered on June 12, 2026 and currently resolves to the IP address 188.114.97.3. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. A recent VirusTotal scan shows that nine out of ninety‑one participating scanners have flagged the host as malicious, confirming a detection consensus that aligns with its classification as a generic phishing site. The limited blocklist presence suggests that the campaign is newly deployed, consistent with the recent registration date.

Infrastructure details beyond the IPv4 address are not disclosed in the available intelligence, and no additional attributes such as ASN, hosting provider, SSL certificate details, or HTTP response codes have been reported. Consequently, the full scope of the hosting environment remains uncertain. Defenders should proactively deny any outbound connections to 188.114.97.3, update intrusion detection signatures to include the domain, and ensure that email gateways and web proxies enforce blocklist entries for bzst.com-payyd.my.

Continuous monitoring of the IP address and periodic re‑scans on VirusTotal are advised to capture any escalation in detection counts. Organizations handling credential‑sensitive workflows should educate users about unsolicited communications that reference the domain, reinforcing the recommendation to verify URLs before credential entry. Given the elevated risk rating and active status, the domain should be treated as hostile and blocked across all security controls until further remediation is confirmed.