nj[.]com-caorz[.]my

Analysis of the domain nj.com-caorz.my indicates it is an active credential phishing site, first observed in security telemetry on July 29, 2026. The domain was registered on June 12, 2026, through an undisclosed registrar. Infrastructure analysis reveals it currently resolves to the IP address 104.21.32.1, which is associated with a content delivery network known to host both legitimate and malicious content. At the time of this report, the domain appears on one security blocklist and is actively blocked by the vendor PhishDestroy.

VirusTotal detection data shows that 8 of 91 security vendors flag nj.com-caorz.my as malicious, though the specific nature of the threat—beyond its classification as generic phishing—has not been fully analyzed in public feeds. The domain's content remains unconfirmed; no page title, brand target, or phishing kit has been identified in available intelligence. Defenders should treat this domain as elevated risk due to its recent registration, active blocklist status, and detection by multiple security engines.

Organizations are advised to implement network-level blocking for 104.21.32.1 and nj.com-caorz.my, monitor for related domains registered under similar naming patterns, and review logs for connections to this infrastructure. Further analysis is required to determine the exact phishing lure, targeted brand, or victim demographics. No evidence links this domain to a specific scam category such as investment fraud, crypto drainers, or shipping scams at this time.