michigan[.]us-paykx[.]my

Analysis indicates that the domain michigan.us-paykx.my was registered on 12 June 2026 and currently resolves to the IPv4 address 104.21.90.207. The domain appears on a single known security blocklist and is actively blocked by the PhishDestroy filtering service, which suggests that it is being used in malicious campaigns. VirusTotal data shows that 11 of 91 scanned security vendors have flagged the domain, providing independent confirmation of its suspicious nature.

The relatively recent creation date combined with the presence on a blocklist points to a short‑lived infrastructure typical of phishing operations. No additional public intelligence such as registrar details, SSL certificate information, or HTTP response codes is presently available, leaving the full scope of the hosting environment and any potential payloads unverified.

Defenders should add the domain and its associated IP address to deny‑list rules, monitor outbound traffic for connections to 104.21.90.207, and consider extending existing phishing detection signatures to include this indicator. Continuous re‑evaluation is advised in case further evidence emerges, such as additional blocklist listings or increased vendor detections.