comptroller[.]com-cakcv[.]my

The domain comptroller.com-cakcv.my is presently active and has been identified as a generic phishing infrastructure with an elevated risk rating. Registration data indicates the domain was created on June 12, 2026, which aligns with the rapid appearance of malicious activity shortly after its inception. DNS resolution points to the address 172.67.147.25, a host that is already associated with known phishing campaigns and is listed by the security‑blocking service PhishDestroy.

Independent analysis shows the domain appears on one external security blocklist, reinforcing the view that it is being actively targeted for mitigation. VirusTotal scanning results reveal that 9 out of 91 security vendors have flagged the domain, providing further corroboration of its malicious nature. The combination of a recent registration timestamp, confirmed resolution to a hostile IP, inclusion on a blocklist, and multi‑vendor detection signals suggests a coordinated phishing operation rather than an isolated incident.

Defenders should prioritize immediate network‑level blocking of the IP address 172.67.147.25 and enforce domain‑based deny rules for comptroller.com-cakcv.my across perimeter firewalls, web proxies, and endpoint protection solutions. Continuous monitoring of DNS queries for this domain and related sub‑domains is advised, as well as periodic re‑evaluation of vendor detection scores to capture any changes in threat activity. Organizations are encouraged to share any observed traffic with threat‑intelligence platforms to enhance collective visibility and response capabilities.