nj[.]com-cagcd[.]my

Analysis conducted on July 29, 2026 identifies the domain nj.com-cagcd.my as an active generic phishing infrastructure. The domain was registered on June 12, 2026 and currently resolves to the IP address 104.21.59.188. Reputation checks show the domain appears on a single security blocklist and is listed by the PhishDestroy feed, indicating that at least one anti‑phishing service has observed malicious activity associated with it. VirusTotal scans have returned seven positive detections out of ninety‑one submitted engines, confirming that multiple independent scanners consider the host suspicious.

No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange (OTX) tags, or registrar details were observed in the available data set. The limited visibility suggests that the campaign is in an early stage or that the operators are employing minimal exposure techniques. Defenders should treat the domain as hostile and block any outbound connections to 104.21.59.188 at the network perimeter.

Email gateways should be configured to deny messages containing URLs that resolve to this host, and security teams should add the domain to internal blocklists. Continuous monitoring of threat‑intelligence feeds for new detections, changes in detection counts, or the appearance of additional indicators of compromise is recommended. Because the underlying web content has not been publicly dissected, analysts should consider performing a controlled sandbox retrieval to capture any payloads or credential‑harvesting forms, while ensuring isolation from production systems.