maixys[.]us[.]cc

Analysis indicates that the domain maixys.us.cc is actively used in a credential harvesting campaign. The domain resolves to the IPv4 address 43.133.41.74 and has been registered since 07 April 2006 through Gname.com Pte. Ltd. Its DNS configuration includes four name servers (a.rsp-dns.com, b.rsp-dns.com, ns1.domainnamens.com, ns2.domainnamens.com), suggesting the use of multiple authoritative providers to increase resilience. The domain appears on a single security blocklist and is currently blocked by the PhishDestroy service, confirming that at least one reputable sinkhole has identified it as malicious. VirusTotal scans show that two out of ninety‑five security vendors flagged the domain, providing independent corroboration of its malicious nature. No additional evidence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available in the supplied intelligence, leaving the exact content and lure technique unconfirmed. The lack of public page analysis means defenders cannot rely on content‑based signatures; instead, infrastructure‑based controls should be prioritized. Recommendations include adding maixys.us.cc and its resolved IP 43.133.41.74 to network deny lists, monitoring DNS queries for the listed name servers, and ensuring that email filters block any messages containing URLs that resolve to this domain. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional indicators of compromise.