phila[.]revenue-zy[.]cc

The domain phila.revenue-zy.cc was registered through Dominet (HK) Limited on September 17, 2025. Infrastructure analysis shows it resolves to the single IPv4 address 43.130.77.166, with no additional hosting details disclosed. The domain is currently listed as active and assigned an elevated risk level.

Detection telemetry indicates that 15 of 91 security vendors on VirusTotal have flagged the domain, suggesting a moderate consensus of malicious intent. Independent blocklist monitoring confirms the domain is present on one security blocklist and has been actively blocked by the PhishDestroy sinkhole service. No public Safe Browsing, Open Threat Exchange (OTX), SSL certificate, HTTP status code, or trust‑score data are available for this host, and the page title or any brand‑specific indicators have not been disclosed.

Given the limited but consistent evidence of phishing‑related activity, defenders should prioritize immediate containment: add phila.revenue-zy.cc and its resolving IP 43.130.77.166 to network deny lists, enforce URL filtering rules, and monitor outbound traffic for any connections to the address. Continuous re‑evaluation of threat‑intel feeds is recommended to capture any emerging indicators, such as additional blocklist entries or increased vendor detections, which would warrant escalation of response measures.