login[.]clients-masspay[.]io

The domain login.clients-masspay.io was registered on February 21, 2026 and is presently listed as offline. DNS resolution points to the address 185.208.156.66, which belongs to ASN 42624 operated by Global-Data System IT Corporation and is geolocated in Switzerland (CH). The site presented the page title “MassPay Login,” aligning with the documented scam type of credential phishing. Infrastructure analysis shows an SSL certificate rated R10, indicating a weak or self‑signed certificate, and a Gridinsoft trust score of 0 out of 100, the lowest possible rating.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis reports that three of ninety‑three scanners flagged the domain, providing additional corroboration of malicious intent. Although the site is no longer reachable, the combination of a recent registration date, low‑trust SSL, poor trust score, blocklist inclusion, and multiple vendor detections establishes a clear risk profile.

Defenders should maintain the current blocklist entries, monitor the IP address for any re‑hosting activity, and ensure that email and web filtering solutions continue to flag URLs containing the domain or its subdomains. Users should be warned not to submit credentials to any site presenting a “MassPay Login” interface unless the authenticity can be independently verified. Continuous vigilance is advised in case the domain is re‑registered or the phishing infrastructure is resurrected.