mctusly[.]com

PhishDestroy identifies mctusly.com as an active credential-harvesting phishing domain designed to trick users into surrendering sensitive login credentials. The domain mimics legitimate login portals of well-known brands, luring victims through phishing emails, fake ads, or typosquatting links. Once a victim enters their username and password, the data is immediately transmitted to attacker-controlled servers for credential stuffing or sale on dark-web markets. Security researchers note that this domain is still under active investigation, but the lack of detections does not equate to safety—many phishing kits remain undetected by antivirus engines for days or weeks, giving threat actors a window to exploit unwitting victims. This domain was flagged as a high-risk credential harvesting site with the following technical indicators: domain creation date of April 23, 2026; SSL certificate issued by Let's Encrypt (common among phishing sites to appear legitimate); VirusTotal detection rate of 5 out of 95 engines as of latest scan; IP resolution to 193.24.123.205 (hosting in a high-risk jurisdiction); and registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for minimal due diligence in domain vetting. The combination of a recently registered domain, clean SSL, and zero detections suggests a newly deployed phishing operation likely leveraging automation and short-lived infrastructure to evade detection. If you visited mctusly.com, immediately change any passwords entered on the site and enable multi-factor authentication on all linked accounts. Run a full antivirus scan using updated software and consider using a password manager that can detect credential phishing attempts. Report the domain to your security team or platform provider and avoid re-visiting the URL. Monitor financial and email accounts for unusual activity, as compromised credentials may be used for broader account takeovers. Stay vigilant: phishing domains often evolve rapidly, and new variants may emerge under similar naming patterns.