phila[.]revenue-nq[.]cc

The domain phila.revenue-nq.cc is currently active and classified as a generic phishing threat with an elevated risk rating. Registration data indicates that the domain was created on September 17, 2025 and was registered through Dominet (HK) Limited, a registrar based in Hong Kong. Network resolution points to the IPv4 address 170.106.51.191, which serves as the sole hosting endpoint observed for this domain.

On the threat intelligence side, VirusTotal has recorded detections from six of ninety‑one security vendors, confirming that multiple scanning engines have identified malicious behavior associated with the domain. The domain is listed on a single external security blocklist and is explicitly blocked by the PhishDestroy mitigation service, providing additional defensive coverage. Although the available data confirms the registration details, hosting IP, and vendor detections, no further attributes such as SSL certificate details, HTTP response codes, or page content have been disclosed, leaving the exact phishing payload and target brand undefined.

Defenders should prioritize blocking traffic to 170.106.51.191 and add phila.revenue-nq.cc to local deny lists. Continuous monitoring of VirusTotal updates and blocklist feeds is advised to capture any changes in detection counts or additional blocklist entries. Organizations employing email or web filtering should ensure the domain is flagged as malicious, and incident response teams should treat any observed communications involving this domain as potentially compromised.