taxny[.]revenue-ncg[.]cc

Analysis as of July 29 2026 indicates that the domain taxny.revenue-ncg.cc was registered on September 21 2025 through Dominet (HK) Limited. The domain resolves to the IP address 172.67.152.24, which is hosted on a cloud service known to be used by multiple malicious actors. The site has been flagged by PhishDestroy and appears on one public security blocklist, confirming its malicious intent. VirusTotal scans show that 10 out of 91 security vendors label the domain as malicious, providing independent corroboration of its phishing nature.

The risk rating is elevated and the operational status is active, meaning the infrastructure is currently reachable. No additional public evidence such as page title, SSL certificate details, or Safe Browsing verdicts is available at this time, leaving the exact content and tactics employed by the site unverified. Defenders should block traffic to taxny.revenue-ncg.cc at the network perimeter, add the domain to DNS sinkhole lists, and ensure endpoint protection solutions ingest the VirusTotal detection data.

Continuous monitoring of the hosting IP 172.67.152.24 for new malicious activity is recommended, as the same address may serve other phishing campaigns. Organizations should also consider reviewing any recent communications that reference tax or revenue-related requests, as the domain name suggests an attempt to impersonate governmental tax entities. Since the domain is relatively recent, threat intelligence feeds should be updated promptly to reflect its presence.