mn[.]com-cagjk[.]my

mn.com-cagjk.my was registered on June 12, 2026 and is currently resolving to the IP address 104.21.73.144. The domain appears on a single external blocklist and has been actively listed by the PhishDestroy mitigation service. VirusTotal has recorded twelve positive detections out of ninety‑one submitted scanners, indicating that a notable minority of security products consider the host malicious. The risk rating assigned by the internal taxonomy is elevated and the operational status is marked as active, suggesting ongoing exploitation.

Infrastructure analysis shows the address 104.21.73.144 is hosted on a cloud service provider, a common choice for short‑lived phishing infrastructure because of rapid provisioning and dynamic IP pools. No TLS certificate details, HTTP response codes, or page title information have been published, so the exact content served by the domain remains unverified. Likewise, Safe Browsing, OTX, and other reputation services have not been referenced in the supplied data, leaving those vectors unconfirmed. Given the observed detections, defenders should block the domain at perimeter firewalls, DNS resolvers, and proxy layers.

Security appliances that reference the PhishDestroy blocklist should be updated to ensure the entry is enforced. Incident response teams should monitor for outbound connections to 104.21.73.144 and correlate any suspicious authentication attempts with the domain name. Continuous re‑scanning of the host on VirusTotal and other sandboxes is advised to capture potential payload evolution. Until further forensic details become available, the recommendation is to treat mn.com-cagjk.my as a confirmed phishing host and to apply comprehensive network‑level mitigations.