nj[.]com-caphy[.]my

The domain nj.com-caphy.my has been identified as an active generic phishing threat as of July 29, 2026. Technical investigation confirms that this domain was registered on June 12, 2026, and is currently resolving to the IPv6 address 2606:4700:3030::6815:4001. The domain has been flagged by 8 out of 91 security vendors, according to the latest VirusTotal scan, and is actively blocked by the PhishDestroy threat intelligence provider. It also appears on one security blocklist, indicating recognized malicious activity or risk associated with this resource.

No specific brand targeting or page content details are available at this time, and the exact nature of the phishing content has not yet been analyzed. There are no references in the intelligence to SSL configuration, HTTP response status, or registrar details. The domain’s infrastructure suggests it is leveraging a Cloudflare IPv6 address, but there is no evidence to indicate the hosting provider or geographic origin.

Given the confirmed detection by multiple security vendors and its listing on an established blocklist, defenders should treat nj.com-caphy.my as a high-risk indicator. Network defenders are advised to block traffic to this domain and monitor for related indicators of compromise. Further investigation into associated infrastructure and potential related domains is recommended. Until additional information is obtained regarding the specific phishing scheme or targeted entities, organizations should enforce standard anti-phishing controls and educate users about the risks of interacting with newly registered and flagged domains.