phila[.]revenue-vj[.]cc

Analysis indicates that the domain phila.revenue-vj.cc was registered on 16 September 2025 through Dominet (HK) Limited and currently resolves to the IPv4 address 170.106.51.191. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming its classification as a phishing vector. VirusTotal reports that seven out of ninety‑one scanning engines have flagged the domain, providing additional corroboration of malicious intent.

The limited blocklist presence suggests that the infrastructure may be relatively new or low‑profile, but the detection by multiple vendors and the active block by PhishDestroy demonstrate that threat actors are already leveraging this domain in a phishing campaign. No public information about the HTTP response status, SSL certificate details, page title, or Safe Browsing verdict is available, leaving those aspects of the payload unverified. Current lack of public SSL or Safe Browsing data means the exact phishing page characteristics remain unknown, and further probing is required to determine the lure used.

Defenders should immediately add phila.revenue-vj.cc to URL filtering and DNS sinkhole rules, monitor traffic to the associated IP address 170.106.51.191, and consider sharing the indicator with upstream threat‑intelligence feeds. Continuous re‑evaluation is advised as additional telemetry, such as page content or further vendor detections, becomes available.