io-pay.shop
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of io-pay.shop
io-pay.shop appears to be a Chinese-language online marketplace offering digital goods and account-related services rather than conventional physical products. Based on the page title, meta description, and homepage screenshot, the site promotes items such as Telegram services, Gmail mailboxes, phone/SIM-related services, API SMS verification, overseas accounts, and social-media or messaging-platform accounts for services including WeChat, QQ, WhatsApp, Line, Tinder, YouTube, Instagram, TikTok, Facebook, and others.
The homepage layout resembles an automated storefront with categorized listings and self-service purchasing. The branding shown in the screenshot references a "v-mall" style platform, but no clear corporate operator, business identity, or transparent ownership details are visible in the provided scan data. The domain name itself is generic and does not clearly identify a known company or established brand.
Safety Assessment for io-pay.shop
This website shows several risk indicators at the time of this scan. It was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, the malware scan reported a malicious threat level and flagged 5 files on the site, although no specific malware family names were provided. The domain is also extremely new at 6 days old, which can increase uncertainty because newly created domains are commonly used for short-lived campaigns.
The site's content also raises concern based on available data. The homepage appears to sell platform accounts, verification-related services, and messaging or social-media access products, which are commonly associated with abuse-prone activity and may be used in ways that violate platform rules or facilitate fraud. While major threat-database checks listed in the scan were clean at the time of review, that does not outweigh the combination of multi-engine phishing detections, malicious file findings, and the very recent registration date.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain is very recently registered and uses Cloudflare nameservers and reverse-proxy infrastructure, with the site resolving to a Cloudflare IP address in Canada. It presents a valid TLS certificate issued by Google Trust Services, which indicates encrypted HTTPS connectivity was available at the time of the scan. DNSSEC appears to be unsigned.
From a security perspective, the main technical concerns are not the certificate itself but the scan results: several JavaScript files and one uploaded image path were flagged during malware analysis, and the domain has little age or reputation history. The site is not ranked in Tranco, which is consistent with a low-visibility or newly launched domain.
Share your experience with this website. Was it safe? Did you encounter any issues?