revenue[.]safety-paypc[.]my

The domain revenue.safety-paypc.my was registered on June 12, 2026 and resolves to the IP address 172.67.205.97. VirusTotal scans show that 11 of 91 security vendors have flagged the domain as malicious, indicating a measurable level of detection across multiple engines. The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed has identified it as a phishing source.

No additional contextual data such as page title, targeted brand, or specific phishing kit has been disclosed, so the precise luring technique and victim profile remain unknown. Infrastructure analysis reveals that the hosting IP belongs to a cloud provider commonly leveraged for fast‑flux or disposable services, which can aid rapid re‑deployment of malicious pages. Defenders should prioritize adding revenue.safety-paypc.my to DNS and proxy blocklists, enforce outbound filtering for the associated IP, and monitor for any traffic anomalies targeting that address.

Given the recent registration date, the domain may be part of a short‑lived campaign; continuous observation of newly created domains resolving to the same IP range is recommended. Organizations using threat‑intel platforms should ingest the VirusTotal detection count and the PhishDestroy block status to enrich their detection rules. Until further forensic details become available, the precautionary stance is to treat any communications originating from or referencing revenue.safety-paypc.my as potentially fraudulent and to educate users about unsolicited requests that could be linked to this domain.