revenue[.]safety-paycn[.]my

Analysis of the domain revenue.safety-paycn.my, created on 12 June 2026, shows that it is actively used in a generic phishing operation. The domain resolves to the IP address 104.21.61.106, which is hosted on a Cloudflare network and has been observed by the PhishDestroy blocklist. It appears on a single security blocklist, indicating limited but confirmed abuse. VirusTotal scans have returned six positive detections out of ninety‑one submitted scanners, confirming that a subset of security vendors consider the host malicious.

The elevated risk rating reflects the combination of recent registration, active hosting, and the detection count. No additional infrastructure details such as ASN, country, or SSL certificate information are currently available in the intelligence feed. The lack of further public analysis means the exact phishing payload, target brand, or credential‑harvesting page cannot be described at this time. Defenders should add revenue.safety-paycn.my to internal blocklists, monitor DNS queries for the 104.21.61.106 address, and enforce web‑filtering rules that deny HTTP/HTTPS traffic to the domain.

Continuous re‑query of VirusTotal and other reputation services is recommended to capture any change in detection scores. Organizations using threat‑intelligence platforms should also flag the domain as compromised to share context with peers. Until more detailed content analysis is released, the domain should be treated as hostile and prevented from reaching end users.