phila[.]revenue-eu[.]cc

This domain, phila.revenue-eu.cc, is under active investigation as an elevated-risk phishing site targeting tax refund or revenue service credentials. Registered on June 12, 2026, through Dominet (HK) Limited, the domain appears on one security blocklist (PhishDestroy) and is flagged by 12 of 91 security vendors in VirusTotal scans. The subdomain structure ('revenue-eu') suggests an attempt to mimic a European revenue or taxation authority, though no specific brand name or page title is confirmed in available data.

Infrastructure analysis reveals no additional hosting or SSL details, limiting further attribution. Defenders should treat this domain as a confirmed phishing threat, particularly for campaigns impersonating government financial services. Immediate blocking at network and endpoint layers is recommended, alongside monitoring for related domains registered through the same registrar.

While the exact content of the site remains unanalyzed, the combination of a recent registration, targeted naming convention, and multiple vendor detections indicates a deliberate phishing operation. No evidence links this domain to broader malware distribution or advanced persistent threats at this time.