phila[.]revenue-kg[.]cc

Analysis of the domain phila.revenue-kg.cc indicates an active generic phishing operation. The domain was registered through Dominet (HK) Limited on September 16 2025 and currently resolves to the IPv4 address 43.130.77.166. VirusTotal reports that 12 of 91 scanned security vendors have flagged the domain as malicious, suggesting a moderate detection consensus. The domain is listed on a single external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing threat.

Infrastructure assessment shows the hosting IP 43.130.77.166 is not associated with any known reputable content delivery networks or cloud providers, and no public SSL certificate information is available, which is typical for short‑lived phishing sites. No Safe Browsing, Open Threat Exchange, or additional trust‑score data were observed for this domain, leaving those vectors unverified. The page title and any brand‑specific content have not been disclosed, so the exact impersonated entity cannot be confirmed at this time.

Given the limited but concrete evidence—registration details, IP address, multi‑vendor detection, blocklist inclusion, and PhishDestroy block—the domain should be treated as high‑confidence malicious. Defensive recommendations include adding the domain to local deny lists, configuring web proxies to block HTTP(S) requests to the address, updating intrusion‑prevention signatures that reference the hosting IP, and monitoring DNS logs for queries to phila.revenue-kg.cc. Continuous re‑evaluation is advised as additional telemetry, such as SSL certificates or page content, becomes available.