phila[.]revenue-bn[.]cc

Analysis of phila.revenue-bn.cc, created on June 12, 2026 and registered through Dominet (HK) Limited, shows that the domain is currently active and classified with an elevated risk rating. DNS resolution points to the IPv4 address 170.106.51.191, which is the sole host observed for this indicator. The domain is listed on one public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, indicating that at least one defensive platform has taken automated action against it.

VirusTotal scans report that seven of ninety‑one participating security vendors have flagged the domain, reinforcing the suspicion of malicious use. No additional intelligence such as page titles, SSL certificate details, or brand targeting is available, so the precise content and phishing kit employed remain unknown. Given the recent registration date, the limited detection history, and the presence on blocklists, defenders should treat phila.revenue-bn.cc as a high‑confidence malicious indicator.

Recommended actions include adding the domain and its resolved IP address to network deny lists, monitoring DNS queries for repeated lookups, and employing sinkholing where feasible to disrupt potential command‑and‑control traffic. Continuous re‑evaluation is advised, as further analysis of HTTP responses or content could reveal additional malicious characteristics.