nj[.]com-cahpr[.]my

The domain nj.com-cahpr.my was registered on June 12 2026. As of July 29 2026, it resolves to IP 104.21.87.203, which is associated with a Cloudflare edge network. VirusTotal has recorded 13 of 91 security vendors flagging the domain, indicating a moderate detection consensus for malicious activity. The domain is listed on a security blocklist and is actively blocked by PhishDestroy, confirming that at least one dedicated anti‑phishing service has taken mitigation action. The elevated risk level assigned aligns with the detection count and blocklist presence.

The current evidence does not include public page content, SSL certificate details, or HTTP response codes, so the exact nature of the phishing payload cannot be confirmed. However, the combination of recent creation, rapid detection by multiple vendors, and blocklist inclusion suggests the domain is being used for phishing campaigns targeting users who might be lured by the "nj.com" substring. Defenders should add the domain to internal deny lists, monitor DNS queries for the associated IP address, and consider sinkholing traffic to the IP. Network sensors should flag any outbound connections to 104.21.87.203 originating from user workstations.

Email gateways should enforce URL reputation checks and block messages containing links to this domain. Threat intelligence platforms should correlate this domain with any observed credential harvesting attempts and share findings with industry information sharing groups. Because the domain leverages a legitimate‑looking sub‑domain pattern, user education on verifying URL authenticity remains essential. Continuous re‑evaluation is advised, as additional indicators such as page content or SSL fingerprint may emerge.