nj[.]com-cavqh[.]my

The domain nj.com-cavqh.my was registered on June 12, 2026 and is currently classified as an active generic phishing threat with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IP address 172.67.138.240, which is the sole hosting endpoint observed. Reputation data indicates that the domain is listed on one security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

VirusTotal scans have returned detections from 12 of 91 security vendors, confirming that multiple independent scanners identify malicious behavior associated with this host. The available evidence does not include registrar details, SSL certificate information, or HTTP response codes, so those aspects remain unverified at this time. Given the confirmed phishing designation, the presence on a blocklist, and vendor detections, security operators should proactively deny network connections to the resolved IP address and add nj.com-cavqh.my to local blocklists.

Continuous monitoring of threat intelligence feeds for any additional indicators, such as new blocklist entries or changes in detection counts, is advised to maintain protective coverage. Defensive teams should also consider sharing the domain’s indicator of compromise with upstream filtering services to enhance collective blocking efficacy.