revenue[.]com-payyjo[.]vip

This domain, revenue.com-payyjo.vip, is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. Analysis indicates it was registered on June 12, 2026, through Gname.com Pte. Ltd., a registrar often associated with disposable or malicious domains. The domain uses Cloudflare for both DNS (nameservers dion.ns.cloudflare.com and laila.ns.cloudflare.com) and content delivery, with an SSL certificate issued by Google Trust Services (WE1) and resolves to IP 104.21.67.219, located in Canada under Cloudflare, Inc. The HTTP status is 521, meaning the web server is down or refusing connections, and the page title confirms this error. The domain appears on at least one security blocklist and is flagged by PhishDestroy. VirusTotal data shows 13 out of 91 security vendors flag this domain as malicious, indicating broad industry recognition of its threat nature. The Gridinsoft trust score is 0 out of 100, supporting the high-risk assessment. The exact phishing content or targeted brand cannot be determined from available data, as the site currently returns a server error. Defenders should block all traffic to this domain and its associated IP address, monitor for any changes in resolution or content, and investigate any user interactions prior to blocking. The domain's recent creation and high vendor detection rate suggest coordinated phishing infrastructure that may be repurposed or rotated. Continuous monitoring is recommended, as the domain could become active again or redirect to other malicious hosts.