Cyber Refuge Zones: Where Threat Actors Operate Safely and Why It Matters