md[.]payimu[.]cc

The domain md.payimu.cc has been identified as a generic phishing site. The domain is currently offline and was previously taken down due to its malicious nature. There is no specific brand impersonation noted in the available intelligence.

Analysis indicates that the domain has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus regarding its threat status. The domain was registered through Gname.com Pte. Ltd. and resolves to the IP address 188.114.97.3. The SSL certificate for this domain is issued by Google Trust Services, which may have been used to gain user trust. The domain was created on June 12, 2026, and it appears on one security blocklist. The overall risk level is elevated, reflecting the potential for harm if accessed.

Given the current offline status of the domain, it is recommended that users and network administrators continue to monitor for any reactivation or similar phishing activities. Security protocols should be reviewed to ensure that mechanisms are in place to prevent access to such domains. Additionally, users should be educated about the signs of phishing and encouraged to report any suspicious activity.