phila[.]reveyhgf[.]cc

The domain phila.reveyhgf.cc was registered on 2025-09-16 through Dominet (HK) Limited and currently resolves to the IPv4 address 170.106.160.91. As of the report date (2026-07-29) the domain is listed on a single security blocklist and has been added to the PhishDestroy blocklist, indicating that at least one external source has already taken defensive action. VirusTotal analysis shows that 11 of 91 scanned security vendors have flagged the domain as malicious, providing a modest consensus that the site exhibits characteristics associated with phishing campaigns.

The elevated risk level and active status suggest that the infrastructure is still being used for malicious purposes, but the limited number of blocklist entries and the relatively recent creation date mean that broader detection coverage is still developing. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available in the current dataset, leaving the exact nature of the phishing lure and any associated payloads uncertain. Defenders should immediately block DNS resolution to 170.106.160.91 and add phila.reveyhgf.cc to URL filtering, email gateway, and endpoint protection block lists.

Continuous monitoring of outbound traffic for connections to the associated IP, periodic re‑scanning on VirusTotal, and ingestion of the domain into internal threat‑intel platforms are recommended to capture any future changes in detection scores or additional indicators. Until more detailed content analysis is performed, the domain should be treated as a potential credential‑harvesting vector and included in broader phishing mitigation strategies.