digigroupmine[.]com

As of July 12, 2026, the domain digigroupmine.com is actively engaged in brand impersonation phishing, specifically targeting Revolut. The domain was registered on December 13, 2024, and is currently flagged by several security vendors and blocklists, including PhishDestroy, OISD, and BLP-Malware. The Gridinsoft trust score for this domain is 0/100, indicating a high level of risk. The domain resolves to the IP address 198.251.84.200 and is served by LiteSpeed web server technology. Additionally, the site uses PHP, Firebase, Bootstrap, Smartsupp, Slick, and jQuery, along with HTTP/3 for web communication. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious sites, and should not be taken as a sign of trustworthiness on its own. The domain appears in 23 threat intelligence pulses on AlienVault OTX, further confirming its malicious nature. VirusTotal reports that 5 out of 95 security vendors flag this domain as malicious, which suggests that while the domain is recognized by some vendors, it may still evade detection by others. Defenders should be vigilant and implement additional layers of security, such as DNS-based blocking, to prevent access to this domain. Network administrators should also monitor for any outbound traffic to the IP address 198.251.84.200, as it may indicate an ongoing attempt to compromise user credentials or financial data. The exact content of the site, including any specific login forms or pages, has not been analyzed, but the page title 'Digigroupmining - Home' suggests it may be designed to mimic a legitimate Revolut page. It is crucial for organizations to educate their employees and customers about the risks of phishing and to verify the authenticity of any communication purportedly from Revolut before providing any sensitive information.