mchajyd[.]us[.]cc

Analysis of the domain mchajyd.us.cc shows it is actively resolving to the IPv4 address 43.133.41.74. The domain was originally registered on 07 April 2006 through Gname.com Pte. Ltd. and continues to be live as of the report date. Its authoritative name servers are a.rsp-dns.com, b.rsp-dns.com, ns1.domainnamens.com and ns2.domainnamens.com, a configuration that is commonly observed in malicious infrastructure.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that threat intelligence providers have identified it as malicious. VirusTotal scans have returned five positive detections out of ninety‑one submitted security vendors, reinforcing the suspicion of phishing activity. No additional public metadata such as page title, SSL certificate details, or Safe Browsing verdicts are available, so the exact content hosted at the address remains unverified.

However, the combination of an active DNS resolution, a history of blocklist inclusion, and multiple vendor detections meets the criteria for a high‑risk phishing indicator. Defensive teams should add 43.133.41.74 and the domain name to outbound and inbound filtering rules, monitor for any DNS changes, and consider sinkholing the host if possible. Continuous re‑evaluation is recommended in case the site’s payload evolves, and any observed traffic should be logged for forensic correlation with credential‑theft incidents.