michigan[.]com-cabsq[.]my

Analysis indicates that the domain michigan.com-cabsq.my was registered on 12 June 2026 and has quickly surfaced on at least one security blocklist. VirusTotal reports that 11 of 91 scanning engines have flagged the domain, demonstrating a non‑trivial detection rate for a newly created site. The domain is also listed by PhishDestroy, confirming that it is being used for malicious phishing campaigns.

No additional public intelligence such as page title, SSL certificate details, hosting IP, or registrar information is currently available, so the full infrastructure footprint remains unknown. Given the early creation date and the presence on multiple threat feeds, the domain should be treated as hostile until further evidence proves otherwise. Defensive teams should add the fully qualified domain name to web‑filtering and DNS‑sinkhole policies, ensure that outbound traffic to the host is blocked, and monitor for any authentication attempts that reference the domain.

Continuous re‑query of VirusTotal and blocklist sources is advised to capture any new detections or classifications. Because the site’s content has not been publicly analysed, analysts should consider sandboxing the URL if a sample becomes available to confirm the phishing payload and to extract any associated command‑and‑control infrastructure. Until such deeper analysis is performed, the recommendation is to maintain a deny‑by‑default posture for michigan.com-cabsq.my across enterprise perimeter and endpoint controls.