cn[.]mcdvdh[.]com

Analysis as of July 23, 2026 confirms that cn.mcdvdh.com is an active technical support scam that masquerades as a Google‑related service. The domain was registered on June 18, 2021 through NameCheap, Inc. and currently resolves to the IP address 172.65.201.65, which belongs to AS13335 Cloudflare, Inc. in the United States. The site returns an HTTP 200 response and presents a TLS certificate issued by Sectigo Limited under the Sectero RSA Domain Validation Secure Server CA, indicating a valid HTTPS configuration despite the malicious intent. The page title captured from the site reads "ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴," providing no direct reference to Google but confirming the presence of unrelated branding that may be used to lure victims.

Technical fingerprints reveal a Node.js backend running Express, with client‑side libraries including jQuery, jQuery UI, and HSTS enforcement, alongside analytics from Google Analytics and Baidu Statistics, suggesting a standard web stack used for tracking. VirusTotal has flagged the domain by 15 of 93 security vendors, and it appears on a single external blocklist, PhishDestroy, confirming its recognition by at least one security community. Reputation services rate the domain extremely poorly, with Scamadviser scoring 1 out of 100 and Gridinsoft assigning 0 out of 100, reinforcing the high‑risk assessment.

While the exact content of the fraudulent support page has not been examined, the combination of brand impersonation, a low trust score, and multiple vendor detections indicates a high likelihood of credential harvesting or payment fraud targeting users who believe they are interacting with Google support. Defenders should block DNS resolution for cn.mcdvdh.com at network perimeters, add the IP 172.65.201.65 to deny lists, and monitor outbound connections to the associated Cloudflare AS for anomalous activity.