mjgenconstruction[.]com

The domain mjgenconstruction.com is currently classified as a generic phishing site with a high risk rating. The domain was registered on August 21, 2024 through Wild West Domains, LLC and remains active as of July 12, 2026. Its SSL certificate is issued by Let’s Encrypt (R13), and the HTTP response returns status code 200 with the page title “One moment, please…”.

Infrastructure analysis shows the domain resolves to IP address 66.45.23.50, which belongs to AS19853 operated by OrangeHost in the United States. The authoritative name servers are ns1.orangehost.com and ns2.orangehost.com. Web server fingerprinting identifies Nginx with the OpenResty module, a common stack for content delivery.

Reputation data indicates a Gridinsoft trust score of 0 out of 100, and VirusTotal reports that 2 of 95 scanned security vendors flag the domain. The domain is listed on one public blocklist and has been blocked by the PhishDestroy service. No additional malware or command‑and‑control activity has been observed in the available telemetry.

Uncertainty remains regarding the specific credential harvesting page hosted behind the generic “One moment, please…” title, as the content is dynamically generated and no static indicators such as brand logos or login forms have been captured. The low detection count suggests limited distribution, but the active status and hosting environment allow rapid replication if needed.

Defenders should add 66.45.23.50 and the mjgenconstruction.com hostnames to outbound filtering rules and monitor DNS queries for the associated OrangeHost name servers. Continuous scanning with URL reputation services is advised to catch any future payloads. Blocking the domain at the perimeter and informing users about the phishing nature will reduce exposure while investigative teams gather more detailed payload samples.