mn[.]com-caasu[.]my

mn.com-caasu.my was first observed on June 12, 2026, the same date the WHOIS record indicates the domain was registered. Within weeks the domain appeared on a security blocklist and was subsequently blocked by the PhishDestroy feed. As of the report date, July 29, 2026, the domain is classified as an active generic phishing infrastructure with an elevated risk rating.

VirusTotal scans have returned seven positive detections out of ninety‑one submitted engines, confirming that multiple anti‑malware products have identified the site as malicious. No additional intelligence such as page title, target brand, or SSL certificate details has been published, so the exact content of the landing page remains unknown. The limited visibility suggests the operators may be using a fast‑flux or short‑lived hosting arrangement, a common tactic for phishing campaigns that seek to evade takedown.

Defenders should add mn.com-caasu.my to URL filtering and DNS block lists, monitor outbound traffic for connections to the domain, and consider isolating any internal accounts that may be targeted by credential‑harvesting attempts. Ongoing observation of the domain’s hosting IP, ASN, and any future VirusTotal submissions is recommended to detect changes in the payload or hosting infrastructure.