ct[.]com-caqlz[.]my

ct.com-caqlz.my is flagged as a generic phishing domain with an elevated risk rating. The zone was created on 12 June 2026 and resolves to the IP address 172.67.221.170, a host that resides on a widely used cloud infrastructure. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy repository, indicating that at least one trusted sinkhole has taken the indicator down.

VirusTotal scans have returned 7 detections out of 91 security vendors, providing independent confirmation that multiple antivirus engines have observed malicious activity tied to this hostname. The detection count, while modest, shows that the domain has attracted enough scrutiny to be recognized by several commercial scanners, suggesting an operational phishing campaign despite its recent registration. No additional telemetry such as SSL certificate details, HTTP status codes, Safe Browsing verdicts, Open Threat Exchange (OTX) reports, or page‑title information is presently available, leaving portions of the threat profile undefined.

The short lifespan of the domain aligns with common tactics employed by threat actors to limit exposure time and evade long‑term detection. Defensive recommendations include adding ct.com-caqlz.my to DNS and email filtering policies, monitoring outbound connections to 172.67.221.170, and sharing the indicator with internal and external threat‑intel feeds. Continuous re‑assessment is advised, as future scans may increase the detection count and reveal further infrastructure characteristics.