taxny[.]revenue-hbn[.]cc

Analysis of taxny.revenue-hbn.cc indicates active malicious infrastructure targeting users with a generic phishing campaign. The domain was registered on September 25, 2025 through Dominet (HK) Limited and resolves to the IP address 188.114.96.3. DNS resolution is handled by Cloudflare nameservers ganz.ns.cloudflare.com and lila.ns.cloudflare.com, suggesting the operator is leveraging Cloudflare’s CDN and protection services to obscure the true hosting location.

VirusTotal records show that 14 of 91 security vendors flag the domain, demonstrating a moderate level of detection across the security community. The domain appears on a single security blocklist and is specifically listed by PhishDestroy, confirming that at least one dedicated anti‑phishing service has identified it as malicious. No publicly available data on SSL certificates, HTTP response codes, Safe Browsing status, OTX mentions, or page title have been observed, leaving those aspects of the site’s behavior unverified at this time.

Defenders should prioritize immediate containment by adding taxny.revenue-hbn.cc to local and network‑level blocklists, monitoring outbound DNS queries for the associated Cloudflare nameservers, and correlating any traffic to the IP 188.114.96.3 with known phishing indicators. Ongoing surveillance of the domain’s registration details and any changes to its DNS configuration is recommended, as shifts in infrastructure could signal escalation or new attack vectors. Given the elevated risk rating and active status, proactive blocking and continuous threat‑intel updates are essential to mitigate potential credential harvesting attempts.