app[.]caagex[.]com

The domain app.caagex.com is currently listed as an active generic phishing threat with an elevated risk rating. Infrastructure analysis shows that the domain is present on a single security blocklist, and it has been explicitly blocked by the PhishDestroy service, indicating that at least one anti‑phishing feed is actively curating it. VirusTotal scans have returned detections from 13 of 91 security vendors, confirming that multiple independent scanners have identified malicious behavior associated with the domain. The detection count suggests that the site likely hosts credential‑harvesting pages or links to further malicious infrastructure, although the exact payload or credential‑stealing mechanism has not been publicly disclosed.

No public information is available regarding the domain’s registrar, registration date, ASN, hosting provider, IP address, SSL certificate details, HTTP response codes, Safe Browsing status, or any page‑title metadata. Consequently, the broader network footprint and potential affiliate infrastructure remain uncertain. The lack of disclosed page content also prevents validation of the specific phishing lure or the targeted brand, reinforcing the classification as a generic phishing operation. Defenders should add app.caagex.com to DNS‑based deny lists and block it at perimeter firewalls.

Security appliances that leverage VirusTotal or similar multi‑vendor reputation feeds should be configured to treat the domain as malicious based on the 13 positive detections. Continuous monitoring of emerging blocklist entries and threat‑intel sources is advised, as further attribution or additional indicators of compromise may be published. Organizations using automated URL filtering should ensure the domain is flagged for quarantine or outright denial to mitigate credential‑theft risk.