phila[.]revenue-cg[.]cc

The domain phila.revenue-cg.cc was registered through Dominet (HK) Limited on 12 June 2026. Within weeks of its creation it appeared on a security blocklist and was subsequently blocked by the PhishDestroy feed, indicating that threat‑intelligence providers have observed malicious activity associated with the hostname. VirusTotal scans show that five of ninety‑one antivirus engines flagged the domain, providing independent confirmation of its malicious reputation.

The limited detection count suggests that the site may be employing evasion techniques or that the payload is not yet widely distributed, but the presence of multiple detections confirms that at least some security products recognize it as a threat. No additional infrastructure details such as hosting IP, ASN, or SSL certificate information are publicly available, and the page title or content has not been publicly disclosed, leaving the exact phishing vector undefined. Defenders should therefore treat the domain as hostile and block it at perimeter and endpoint layers.

Network sensors should be tuned to alert on DNS queries for phila.revenue-cg.cc, and any outbound connections to the domain should be denied. Incident response teams encountering traffic to this hostname should collect full packet captures and request forensic analysis from the hosting provider. Continuous monitoring of threat‑intel feeds for updates on detection counts, additional blocklist listings, or newly observed payloads is recommended to maintain an up‑to‑date mitigation posture.