We couldn't read an SSL certificate for it when we last analysed it.
What security vendors and the WOT community say about this domain.
The WOT community hasn't rated this domain yet.
What loads and tracks visitors when the homepage opens.
Running a full browser scan of the homepage… This takes about a minute.
We couldn't read an SSL certificate on port 443 when we last analysed refo.run. Refresh the analysis to check again.
292 similar domains registered in the last 90 days — possible typosquatting or phishing.
| Domain | Why it’s similar | Registered | Status | Report |
|---|---|---|---|---|
| ref0.work | Look-alike characters | 25 Oct 2026 | Checking… | Report → |
| ref0.app | Look-alike characters | 11 Oct 2026 | Checking… | Report → |
| ref0.dev | Look-alike characters | 8 Oct 2026 | Checking… | Report → |
| ref0.eu | Look-alike characters | 24 Aug 2026 | Checking… | Report → |
| refo.info | Other extension | 9 Oct 2026 | Checking… | Report → |
From CubDomain's daily newly registered domains. Similar doesn't mean malicious.
Is refo.run’s name taken on other extensions?
No reviews yet. Used refo.run? Be the first to say how it went.
Reviews are from CubDomain users and are separate from the security verdicts above.
Four timed TCP connections to port 443 from CubDomain's servers.
CubDomain is not affiliated with refo.run. Data is collected independently from public sources and some figures are estimates, provided for information only.
Spam and malware blocklists for the site's IP and mail servers.
Found in public certificate transparency logs.
Searching the certificate transparency logs… This can take up to a minute.
When the site first appeared, and what has changed since.
We record what changes from the next time this report is refreshed.