chezupshaw[.]com

The domain chezupshaw.com was created on October 14, 2014 through GoDaddy.com, LLC and currently resolves to IP address 173.236.195.92, which is owned by New Dream Network, LLC (AS26347) in the United States. The hosting environment is provided by DreamHost, as indicated by the SSL certificate issued to New Dream Network LLC dba Dreamhost and the presence of DreamHost name servers ns1.dreamhost.com, ns2.dreamhost.com, and ns3.dreamhost.com. An HTTP request to the site returns a 200 status code, but the page title returned is "Site not found · DreamHost," confirming that the service is presently taken offline. Email infrastructure is configured with MX records pointing to mx1.dreamhost.com and mx2.dreamhost.com, both with priority zero, suggesting that any mail directed to the domain would be handled by DreamHost’s mail servers. Reputation data is overwhelmingly negative.

Google Safe Browsing flags the domain for social engineering, and VirusTotal reports that 16 of 95 security vendors have flagged it as malicious. AlienVault Open Threat Exchange lists the domain in 17 separate threat‑intel pulses, and it appears on at least one public security blocklist. Independent trust‑ranking services assign extremely low scores: Scamadviser rates it 1 out of 100, and Gridinsoft assigns a score of 0 out of 100. PhishDestroy has also added the domain to its block list.

The evidence collectively points to a high‑risk delivery‑scam infrastructure that is currently inactive but retains the capability to host malicious content or be re‑activated. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IP and name servers, and ensure that any outbound communications to the MX hosts are inspected for potential phishing content. Because the site is offline, there is no active payload to analyze, but the historical indicators suggest that the domain has been used for social‑engineering campaigns in the past.