phila[.]revenue-fh[.]cc

On July 29, 2026, the domain phila.revenue-fh.cc was identified as a confirmed phishing site. This domain, registered through Dominet (HK) Limited on June 12, 2026, is currently active and resolves to the IP address 170.106.51.191. The domain appears on one security blocklist, specifically PhishDestroy, indicating that it has been flagged for malicious activity.

Analysis indicates that the domain is actively being used for phishing, and while the exact content of the site has not been fully analyzed, the elevated risk level and blocklisting suggest that it poses a significant threat. Defenders should take immediate action to block this domain and monitor for any related malicious activity. The domain's presence on a known blocklist and the active resolution to a potentially harmful IP address should be treated as a high priority.

Security teams are advised to update their threat intelligence databases and ensure that endpoint protection systems are configured to prevent access to this domain. Further investigation into the specific nature of the phishing campaign and the potential targets is recommended.