# revowebs.cc — SUSPICIOUS

> Revowebs.cc is a credential theft phishing site. Flagged by 4 blocklists, check the full report now.

## Summary
PhishDestroy identifies revowebs.cc as an active credential theft phishing domain designed to harvest user login credentials. This domain poses a direct threat to individuals and organizations by mimicking legitimate websites to trick users into submitting sensitive information such as usernames, passwords, and financial details. The domain’s infrastructure and registration details exhibit multiple red flags consistent with phishing operations, warranting immediate caution and proactive mitigation steps.  

This domain was flagged by four prominent security blocklists including PhishingArmy, StevenBlack, OISD, and CERT-PL, indicating widespread recognition of its malicious nature. Revowebs.cc resolves to IP address 137.220.145.244 and was registered through Gname.com Pte. Ltd. on March 06, 2026. Currently, it holds a 0/95 detection rate on VirusTotal, suggesting it remains under the radar of many antivirus engines despite clear malicious indicators. The domain utilizes a SSL certificate issued by TrustAsia Technologies, Inc., which may further deceive users into believing the site is secure.  

If you or someone in your network has visited revowebs.cc, immediately cease use of any credentials entered on the site and change those passwords on a secure, trusted device. Run a full system scan using updated antivirus software to detect and remove any potential malware. Organizations should block access to this domain at the network level and audit logs for any unauthorized access or data exfiltration. Report the domain to your IT security team or local CERT if you suspect interaction. Remain vigilant for follow-up phishing attempts leveraging credentials stolen from this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-06 15:55:27
- Registrar: Gname.com Pte. Ltd.
- IP: 137.220.145.244

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishingArmy", "StevenBlack", "OISD", "CERT-PL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/revowebs.cc
- PhishDestroy: https://phishdestroy.io/domain/revowebs.cc/
- LLM endpoint: https://phishdestroy.io/domain/revowebs.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/revowebs.cc/
Last updated: 2026-04-06