pc[.]hyextechnogoy[.]cc

pc.hyextechnogoy.cc is currently active and classified as a high‑risk generic phishing infrastructure. The domain was registered on September 23 2025 through Gname.com Pte. Ltd. and uses the Cloudflare name servers justin.ns.cloudflare.com and lola.ns.cloudflare.com. DNS resolution points exclusively to the address 104.21.21.50, an IP that is shared among multiple malicious actors observed in recent threat feeds. The domain appears on a single public security blocklist and is actively blocked by the PhishDestroy sinkhole, indicating that at least one defensive organization has observed malicious traffic associated with it.

VirusTotal analysis shows that 1 of 91 scanned security vendors flagged the domain, providing independent confirmation of its suspicious nature. The limited public footprint—absence of additional blocklist listings, a single vendor detection, and no publicly disclosed SSL certificate details—leaves several aspects of the campaign ambiguous. No page title, brand targeting, or specific phishing kit information has been disclosed, so the exact luring vector and victim profile remain unclear. Nonetheless, the combination of recent registration, dedicated Cloudflare resolver usage, and confirmed detection by at least one vendor suggests an intentionally provisioned phishing operation rather than an abandoned or repurposed site.

Defenders should prioritize blocking DNS queries for pc.hyextechnogoy.cc at the resolver level and adding the domain to web‑filter allow‑lists for malicious URLs. Network monitoring should flag any HTTP or HTTPS connections to 104.21.21.50 that originate from internal clients, and IDS signatures that reference the domain or its IP should be updated. Continuous re‑evaluation is advised, as additional detections or blocklist entries may emerge, potentially revealing the underlying phishing kit or targeted brand.