floridarevenuel[.]us[.]cc

This domain, floridarevenuel.us.cc, is actively flagged as a phishing site targeting entities resembling the Florida Revenue Service. Infrastructure analysis reveals it was registered on June 12, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. The domain resolves to IP address 43.157.223.11, which has been linked to other phishing campaigns, though specific hosting provider details remain unconfirmed. Nameservers a.rsp-dns.com and b.rsp-dns.com are utilized, a pattern observed in other fraudulent domains leveraging the same DNS infrastructure for resilience. Security vendor detections on VirusTotal indicate 16 of 91 engines classify this domain as malicious, a moderate but notable signal given the variability in detection rates across vendors.

The domain appears on at least one security blocklist, specifically PhishDestroy, which specializes in phishing threat intelligence. No additional blocklist or threat feed data is currently available, limiting broader contextual assessment. The domain's recent creation date aligns with typical phishing lifecycle patterns, where domains are rapidly deployed and discarded. Defenders should treat this domain as an elevated risk due to its active status, confirmed phishing classification, and infrastructure indicators. Immediate action includes blocking resolution at the DNS level or via network firewalls, as well as monitoring for internal connections to 43.157.223.11.

SOC teams should review logs for any user interactions with this domain, particularly in regions or organizations where Florida Revenue Service communications are relevant. While the exact phishing kit or brand impersonation details are not yet analyzed, the domain's naming convention strongly suggests a focus on tax or revenue-related fraud. Further investigation into the IP's hosting environment and associated domains may reveal additional linked threats.