app[.]caemux[.]com

Analysis indicates that app.caemux.com was registered on June 08, 2026 through the registrar Fewmoretaps OU operating as Trustname.com. The domain resolves to the IP address 104.21.83.163, which is currently the only observable network indicator. On VirusTotal the domain received 11 positive detections out of 91 scanned security vendors, demonstrating a moderate level of consensus among scanning engines that the site is malicious. It is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one commercial phishing‑tracking service considers the domain active.

The threat is classified as a generic phishing campaign with an elevated risk rating and remains active as of the report date, August 06, 2026. Defenders should treat traffic to app.caemux.com as hostile. Immediate mitigation steps include adding the domain and its resolved IP address to DNS‑based deny lists, firewall egress filters, and proxy block rules. Existing intrusion‑detection signatures that reference the IP 104.21.83.163 should be updated to generate alerts on any outbound connections.

Because the underlying hosting infrastructure and content have not been publicly disclosed, continuous monitoring of DNS queries for the domain and periodic re‑scans on platforms such as VirusTotal are recommended to capture any changes in the payload or additional detections. Organizations employing web‑content filtering should ensure the domain is categorized as malicious. Finally, security teams should correlate internal logs for any authentication attempts or credential submissions that may have been directed to this host, as the campaign likely seeks to harvest user credentials.