nj[.]com-caxsq[.]my

The domain nj.com-caxsq.my was registered on June 12, 2026 and is currently active. Infrastructure analysis shows it resolves to the IP address 172.67.164.79, which is part of a widely used content‑delivery network. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one reputable anti‑phishing service has identified it as malicious.

VirusTotal reports that 7 of 91 scanned security vendors have marked the domain as malicious, providing independent confirmation of its threat status. The elevated risk rating reflects the combination of recent creation, active hosting, and multiple detections. Defenders should immediately add nj.com-caxsq.my to DNS and web‑proxy blocklists, enforce outbound filtering for the associated IP, and monitor network logs for any connections to the domain or its hosting provider.

Because the domain’s content has not been publicly analyzed, the exact phishing payload or target brand remains unknown; however, its classification as generic phishing suggests it may be used to harvest credentials or deliver malicious payloads. Continuous monitoring of threat‑intel feeds for new indicators, such as additional blocklist listings or updated VirusTotal detections, is recommended. Organizations should also consider sinkholing the domain where feasible and ensure that users are educated about unsolicited requests that direct them to unfamiliar URLs, even when the domain appears to use a familiar top‑level structure.