redi-agencies[.]one

redi-agencies.one is assessed at an elevated risk level due to its association with generic phishing activities. The domain has been identified as active and is currently flagged for hosting content mimicking legitimate online portals, increasing the likelihood of credential harvesting or other fraudulent schemes targeting end users.

Technical analysis reveals several significant threat indicators. VirusTotal reports 16 out of 95 security vendors detecting this domain as malicious, reflecting a broad consensus among threat intelligence platforms. The domain resolves to IP address 188.114.97.3, which may be utilized to host multiple malicious domains or phishing infrastructure. Registration was completed through Dynadot Inc, a registrar that has been observed in prior investigations for hosting similar threat assets. The domain was created on July 01, 2026, indicating it is very recent and possibly established for short-term malicious campaigns. An SSL certificate issued by Google Trust Services is present, enabling encrypted connections that could mislead users into believing the site is legitimate.

To mitigate the risks posed by this generic phishing operation, it is recommended to immediately block access to redi-agencies.one at both network and endpoint security layers. Security teams should update detection signatures to flag communications with the associated IP address and monitor for additional related domains registered via the same registrar or utilizing similar infrastructure. End users should be warned against interacting with unsolicited communications referencing this domain, and credentials potentially exposed should be reset. Continuous monitoring for further indicators linked to this campaign is advised to contain and remediate any emerging threats.