michigan[.]safety-payoc[.]vip

The domain michigan.safety-payoc.vip is flagged as an active generic phishing campaign with an elevated risk rating. Infrastructure analysis shows it was registered on June 12, 2026 through Gname.com Pte. Ltd. and resolves to the IP address 188.114.97.3. The domain appears on at least one security blocklist and is actively blocked by the PhishDestroy service, indicating that threat‑intelligence feeds have already identified it as malicious.

VirusTotal scans report that 7 out of 91 security vendors have flagged the domain, providing independent corroboration of its suspicious nature. No public data on SSL certificate details, HTTP response codes, Safe Browsing status, or page title is currently available, so the exact content and delivery mechanisms remain unverified. Defenders should treat any traffic to or from this domain as hostile.

Recommended actions include adding the domain and its resolved IP address to local blocklists, ensuring that email gateways and web proxies enforce the block, and monitoring for any related indicators of compromise that may appear in logs. Continuous observation of threat‑intel feeds for updates on detection signatures or additional infrastructure ties is advised, as the current evidence is limited to registration, hosting, and vendor flagging data.