cd[.]sxfxjy[.]top

cd.sxfxjy.top is currently classified as a high‑risk generic phishing site. The domain was registered on 2025-03-07 through Alibaba Cloud Computing Ltd. d/b/a HiChina and is hosted on IP 172.245.67.31, which belongs to AS36352 (HostPapa) in the United States. DNS resolution uses the authoritative servers dns25.hichina.com and dns26.hichina.com. The web server returns HTTP 200 without TLS; the page title observed is "酷狗音乐". Reputation services flag the domain as extremely untrustworthy, with a Scamadviser score of 1/100 and a Gridinsoft score of 0/100, and it appears on one security blocklist. VirusTotal reports that 2 of 95 scanners have flagged the domain, indicating some detection of malicious behavior. PhishDestroy has also listed the domain as blocked. The limited detection count suggests that the payload or phishing kit may be novel or evading many scanners, but the presence of any detections confirms malicious intent. At present no further technical artifacts such as payload hashes or command‑and‑control endpoints have been disclosed. Defenders should block DNS resolution to 172.245.67.31, enforce TLS inspection to capture any future encrypted traffic, and monitor outbound connections from internal hosts to the identified IP range. Continuous re‑scanning on VirusTotal and inclusion in local blocklists are recommended to mitigate potential credential harvesting attempts.