mn[.]com-caart[.]my

This domain, mn.com-caart.my, was registered on June 12, 2026, and is currently flagged as a credential-phishing site by security vendors. Analysis indicates the domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal reports that 9 out of 91 security vendors classify this domain as malicious, suggesting a consensus among detection engines regarding its threat status. The domain resolves to the IP address 172.67.130.222, which may be part of a content delivery network or hosting provider commonly used to obscure the origin of malicious infrastructure.

No additional details regarding the autonomous system number, hosting country, or SSL certificate attributes are available at this time. The exact content or targeted brand of the phishing site remains unconfirmed, as no page title, brand identification, or phishing kit details were provided in the available intelligence. Defenders should treat this domain as an active threat and prioritize blocking it at the DNS or proxy level.

Network logs should be reviewed for connections to 172.67.130.222 or the domain itself, particularly from endpoints that handle sensitive credentials. If internal phishing simulations or user awareness programs are in place, this domain may serve as a relevant example for training purposes. Further analysis, including sandbox execution or manual inspection, is recommended to determine the specific phishing tactics employed, though such actions should be conducted in a controlled environment to avoid exposure to live threats.