maisxc[.]us[.]cc

maisxc.us.cc is currently active and resolves to the IPv4 address 43.133.41.74. The domain was registered on April 07, 2006 through Gname.com Pte. Ltd., and uses the name servers a.rsp-dns.com, b.rsp-dns.com, ns1.domainnamens.com and ns2.domainnamens.com. Multiple security feeds have flagged the domain: it appears on two public blocklists and is explicitly listed by PhishDestroy and OpenPhish as a phishing source. VirusTotal scans show that 13 of 91 antivirus and URL‑reputation engines return a positive detection for the domain, indicating a non‑trivial malicious signal.

The available intelligence does not include SSL certificate details, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange identifiers, so the presence or absence of additional reputation data cannot be confirmed at this time. The lack of publicly disclosed page title or content analysis means the exact phishing lure or targeted brand remains unknown. Given the confirmed presence on blocklists and the VirusTotal detections, defenders should treat connections to maisxc.us.cc as hostile. Network perimeter devices, DNS filtering solutions, and endpoint web filters ought to block or quarantine any request to the domain.

Security operations teams should monitor for outbound traffic to 43.133.41.74 and consider adding the IP address to internal deny lists. Because the domain is hosted on infrastructure that may be shared with other malicious sites, broader IP‑based blocking may be warranted. Analysts should continue to gather evidence by retrieving the HTTP response, checking SSL certificates, and submitting the URL to additional sandbox services to refine the threat profile. Until a full content analysis is performed, the domain should remain on high‑severity watch lists and any user‑initiated activity that involves the domain should be logged and investigated.