phila[.]revenue-dx[.]cc

Analysis as of July 29, 2026 indicates that the domain phila.revenue-dx.cc was registered on June 12, 2026 through Dominet (HK) Limited, a registrar known to host abusive registrations. The domain resolves to the IPv4 address 170.106.51.191, which is the sole hosting endpoint observed. VirusTotal has recorded five detections out of ninety‑one scanning engines, confirming that multiple security vendors have identified malicious behavior associated with the domain.

The domain is listed on one public security blocklist and is actively blocked by the PhishDestroy feed, providing additional confirmation of its threat status. No public Safe Browsing, OTX, SSL certificate details, HTTP response codes, or trust‑score metrics are currently available for this host, leaving those vectors unverified. The limited blocklist presence suggests that broader community awareness may still be emerging, while the vendor detections and PhishDestroy block indicate a concrete phishing risk.

Defenders should add phila.revenue-dx.cc to proxy and firewall deny lists, monitor DNS queries for the 170.106.51.191 address, and enable outbound URL filtering that references the PhishDestroy feed. Continuous re‑scanning on VirusTotal and periodic checks of emerging blocklists are recommended to capture any changes in detection prevalence. Until additional evidence such as page content or SSL metadata becomes available, the domain should be treated as a confirmed phishing infrastructure with elevated risk.