revenue[.]safety-payzd[.]vip

The domain revenue.safety-payzd.vip is identified as a credential theft phishing site and is currently offline. This domain was registered through Gname.com Pte. Ltd. and was created on June 12, 2026. It has been taken offline, but the threat it posed remains relevant for past and potential future activities.

Infrastructure analysis reveals that revenue.safety-payzd.vip resolves to the IP address 188.114.96.3. The domain has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion. It appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which can sometimes be misleading as it lends an air of legitimacy to potentially malicious sites. The domain's creation date of June 12, 2026, suggests it was recently established, often a characteristic of short-lived phishing campaigns.

Given the current offline status of revenue.safety-payzd.vip, the immediate threat is mitigated. However, users are advised to remain vigilant and avoid clicking on any links or providing personal information to any similar domains. Security teams should monitor for any reactivation of this domain or the associated IP address and ensure that all systems are updated with the latest threat intelligence. Additionally, implementing multi-factor authentication and educating users about phishing tactics can further reduce the risk of credential theft.