phila[.]revenue-gr[.]cc

Analysis of the domain phila.revenue-gr.cc indicates that it is actively used for generic phishing. The domain was registered on September 15 2025 through Dominet (HK) Limited, a registrar based in Hong Kong. DNS resolution points to the IPv4 address 43.130.77.166, which is the sole host associated with the domain in public records.

On VirusTotal the domain is flagged by five of ninety‑one scanned security vendors, confirming that multiple independent tools have identified malicious behavior. The domain is listed on one public security blocklist and is explicitly blocked by the PhishDestroy filtering service, reinforcing its reputation as a threat. No public evidence of SSL/TLS configuration, HTTP response codes, or page title has been disclosed, and no additional intelligence such as Safe Browsing or Open Threat Exchange entries is currently available.

Consequently, the precise payload or credential‑harvesting technique employed by the site remains unknown. Defenders should treat the domain as hostile: add the FQDN and its resolving IP address to network‑level deny lists, ensure that web‑proxy and DNS filtering solutions block access, and monitor for any outbound connections to 43.130.77.166. Continuous re‑evaluation is advised in case further indicators, such as content snapshots or additional vendor detections, become available.