phila[.]revenue-eq[.]cc

Analysis of the domain phila.revenue-eq.cc shows it is currently active in a generic phishing operation. The domain was registered on June 12, 2026 through Dominet (HK) Limited, and it resolves to the IPv4 address 43.130.68.208. VirusTotal reports that 15 of 91 security vendors have flagged the domain, indicating that a minority of scanners have identified malicious characteristics. It appears on one public security blocklist, and the anti‑phishing service PhishDestroy has already blocked it.

These data points confirm that the infrastructure is known to at least some defensive platforms, but no broader intelligence such as SSL certificate details, HTTP response codes, or page titles is available. The limited detection footprint suggests that the campaign may be in early stages or employing low‑profile hosting. Uncertainty remains regarding the exact phishing payload, targeted brands, and any additional infrastructure components beyond the single IP address. Defenders should immediately add 43.130.68.208 to network blocklists, configure DNS filtering to deny resolutions of phila.revenue-eq.cc, and monitor for any outbound traffic to the host.

Continuous re‑scanning on VirusTotal and other multi‑engine services is advised to capture evolving detection signatures. Organizations using email gateways and web proxies should enforce URL reputation checks and consider deploying sandbox analysis for any content retrieved from the domain. Close observation of related indicator trends, such as new domains registered by Dominet (HK) Limited or similar IP ranges, will aid in early detection of campaign expansion.