mass[.]revamhfr[.]cc

The domain mass.revamhfr.cc was registered on June 12, 2026 through Dominet (HK) Limited and currently resolves to the IPv4 address 170.106.160.91. Analytical tools have identified the domain as malicious: fourteen of ninety‑one security vendors on VirusTotal flag it as a threat, and it is listed on a single external blocklist. Defensive services have taken action, with PhishDestroy confirming the domain is blocked within its network.

The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any observed content, so the exact phishing lure or targeted brand cannot be confirmed at this time. Infrastructure analysis shows the hosting IP is not associated with a known reputable cloud provider, and the registrar’s Hong Kong location aligns with a pattern of short‑lived domains used in phishing campaigns. Because the domain is actively resolving and has already been detected by multiple security vendors, it should be treated as a live threat.

Defenders are advised to add 170.106.160.91 to network denial lists, update URL filtering rules to block mass.revamhfr.cc, and monitor for any outbound connections to that address. Additional investigation, such as fetching the page content in a sandboxed environment, would be required to determine the specific impersonation technique and any credential‑harvesting forms that may be present.