roguecu-form[.]org

This domain operates as a credential harvesting phishing page impersonating user-facing forms, designed to collect sensitive authentication data such as login credentials and potentially financial information. The infrastructure behavior and rapid takedown status indicate active malicious use with elevated risk.

Multiple intelligence sources confirm malicious classification: Gridinsoft trust score 0/100, AlienVault OTX shows presence in 2 threat intelligence pulses, and VirusTotal reports 6/95 security vendors flagging it. The domain was created June 09, 2026, registered via Squarespace Domains LLC, resolves to IP 83.142.209.85, appears on 1 security blocklist, and is blocked by PhishDestroy. Current status is offline.

If accessed, users should assume credential compromise risk. Immediate actions include changing passwords for any accounts entered, enabling multi-factor authentication, and reviewing account activity for unauthorized access. Systems potentially used to visit the site should be scanned and cached credentials cleared. Network administrators should block related indicators, including IP 83.142.209.85 and domain artifacts, and monitor for repeated connection attempts or phishing callbacks. Incident response should treat this as a confirmed phishing exposure event due to multi-source corroboration and vendor detection consensus.