phila[.]revenue-kz[.]cc

The domain phila.revenue-kz.cc was registered on September 16, 2025 through Dominet (HK) Limited and is currently classified as an active generic phishing infrastructure with an elevated risk rating. VirusTotal scans show that five of ninety‑one security vendors have flagged the domain, indicating that at least a minority of detection engines have identified malicious characteristics associated with the host. The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that it is being used for phishing‑related activities.

DNS resolution for the domain points to the IP address 43.130.77.166, which can be used by defenders to enforce network‑level denial or to monitor for associated traffic patterns. No additional public evidence such as SSL certificate details, HTTP response codes, page titles, or content analyses has been disclosed, so the exact nature of the phishing payload or the targeted brand remains unknown.

Given the observed vendor detections, blocklist presence, and active status, security teams should consider adding the domain and its resolved IP address to web‑filter and intrusion‑prevention rule sets, monitoring DNS queries for future lookups, and reviewing outbound traffic for connections to the host. Continuous re‑evaluation is advised, as further intelligence (e.g., page content or credential‑stealing kits) may emerge that would refine the threat profile and response actions.