nj[.]com-cajht[.]my

This domain, nj.com-cajht.my, was registered on 12 June 2026 and is currently active. VirusTotal analysis shows that 11 of 91 security vendors have flagged the host as malicious, indicating a consensus of concern among scanning engines. The domain resolves to the IPv4 address 104.21.112.1, a public address that is commonly associated with content delivery networks, providing the attacker with reliable hosting and potential anonymity.

The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one downstream protection platform recognizes it as a phishing vector. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is available at this time, leaving the precise payload and target brand undefined beyond the generic phishing classification. Given the recent creation date, the modest detection count, and the presence on active blocklists, the infrastructure appears to be in an early deployment stage, but the existing vendor flags suggest that malicious content is already being served.

Defenders should add nj.com-cajht.my to URL filtering rules, enforce DNS sinkholing where possible, and monitor network traffic for connections to 104.21.112.1. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as phishing page content, credential harvesting forms, or expanded hosting footprints.