mycsskunds[.]com

mycsskunds.com was observed hosting a generic phishing page whose HTML title reads “Site is created successfully!”. The domain was registered on 21 February 2026 through Key-Systems GmbH and points to the IP address 104.219.232.50, which belongs to AS27176 (DataWagon LLC) located in the United States. The authoritative name servers are adel.ns.cloudflare.com and anirban.ns.cloudflare.com, indicating use of Cloudflare DNS. No TLS certificate is presented, so connections are served over plain HTTP. The domain resolves to a single A record and includes an MX record (mail.mycsskunds.com, priority 10).

Threat intelligence sources have flagged the domain. AlienVault OTX records show inclusion in three separate pulses. It appears on one public blocklist and is listed as blocked by the PhishDestroy sinkhole. VirusTotal analysis reports that 18 of 95 security vendors classified the domain as malicious, reinforcing the suspicion of phishing activity. As of 24 July 2026 the site is taken offline, which limits immediate exposure but does not remove the underlying infrastructure.

The lack of SSL also makes the site unsuitable for credential harvesting via encrypted channels, but the presence of an active mail exchanger suggests attempts to receive victim submissions. Analysts should continue to monitor the IP 104.219.232.50 and the associated Cloudflare name servers for any re‑activation. Defensive teams are advised to add the domain and its IP to network deny lists, update email security filters to block the MX host, and ensure that URL filtering solutions reference the current blocklist entries. Continued observation of any DNS changes or new certificate issuance is recommended.