phila[.]revenue-da[.]cc

This domain, phila.revenue-da.cc, is flagged as an active phishing site targeting municipal revenue or tax-related services. Analysis indicates the domain was registered on June 12, 2026, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to IP address 170.106.51.191, with no additional hosting or ASN details currently available. Detection data shows the domain appears on one security blocklist and is blocked by PhishDestroy.

VirusTotal reports five of ninety-one security vendors flagging the domain as malicious, though the specific detection categories remain unconfirmed. No Safe Browsing, Open Threat Exchange, or SSL certificate details are provided, limiting further assessment of its technical footprint. The exact content or targeted brand is not yet analyzed, but the domain structure suggests an attempt to mimic a city revenue portal, likely Philadelphia-based given the 'phila' prefix.

Defenders should treat this domain as elevated risk and prioritize blocking it at the DNS or network layer. Additional monitoring of the IP 170.106.51.191 may reveal related malicious infrastructure, as threat actors often reuse hosting for multiple campaigns. No evidence of takedown or inactive status has been observed as of July 29, 2026.