phila[.]revenue-er[.]cc

Analysis as of July 29, 2026 indicates that the domain phila.revenue-er.cc was registered on June 12, 2026 through Dominet (HK) Limited. The domain resolves to the IPv4 address 170.106.51.191, which is currently listed by the PhishDestroy sinkhole as a known malicious host. Independent threat feeds have placed the domain on a single security blocklist, and VirusTotal reports that 10 of 91 scanned security vendors flag the domain as malicious.

The elevated risk rating and active status reflect ongoing exploitation. No public SSL certificate details, HTTP response codes, or page title information have been disclosed, so the exact content served by the site remains unverified. Defenders should treat any traffic to phila.revenue-er.cc as hostile.

Immediate actions include adding the domain and its resolved IP address to outbound deny lists, updating intrusion detection signatures, and ensuring that web proxy and DNS filtering solutions block the domain. Monitoring for any new detections on additional blocklists or changes in the VirusTotal detection count is advised, as the infrastructure could be expanded or repurposed. Given the recent creation date, the infrastructure is likely part of a short‑lived phishing campaign, and rapid response can prevent further credential harvesting attempts.