revenue[.]refudagh[.]cc

Analysis of revenue.refudagh.cc shows the domain was registered on 18 September 2025 through Dominet (HK) Limited. The domain resolves to the IPv4 address 170.106.160.91, which is currently listed on a single external blocklist and has been actively blocked by the PhishDestroy feed. VirusTotal reports that 11 of 91 scanned security engines have flagged the domain as malicious, indicating a moderate level of consensus among scanners.

The risk rating assigned is elevated and the operational status is active, consistent with ongoing phishing campaigns. No public SSL certificate details, HTTP response codes, or page title information are available in the provided intelligence, so the exact content served by the domain cannot be confirmed at this time. The limited visibility of the hosting environment and the absence of additional attribution (such as ASN or country) constrain the depth of the technical profile, but the combination of recent creation, hostile registrar, malicious detections, and inclusion on a blocklist provides sufficient evidence for defensive action.

Organizations should add revenue.refudagh.cc to DNS and URL filtering policies, block the associated IP address 170.106.160.91 at network perimeter devices, and monitor for any outbound connections to that host. Security teams are advised to keep the domain under continuous observation in threat intelligence feeds, and to correlate any internal logs that reference the domain or IP with user activity to identify potential compromise attempts. Because the domain is actively flagged by multiple vendors, proactive containment is recommended to reduce exposure to credential harvesting or other phishing‑related threats.