Suspicious

Phishings targeting Revolut

Suspicious and active websites

Phishings targeting Revolut

Suspicious and active websites

Website
revolut.com
About
AIFintech / multi-currency target. Phishing pages mimic the login + 2FA confirmation flow to drain balances.
Hosts
NETH LLC (10) · Cloudflare, Inc. (5) · SEDO GmbH (3)
Countries
UkraineUkraine (10) · United StatesUnited States (7) · GermanyGermany (4)
TLS certs
R12 (8) · R13 (3) · Google Trust Services (3)
Historical record. phishunt is not tracking any active Revolut phishing site right now; the 21 entries below are from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.
First seen URL IP Cert Detail
2026-08-29 https://transrev0lut.com 198.185.159.144 YR2 View →
2026-08-14 https://nationalconsumercenter.co.uk/?flow=9f6a0f93-dba1-f647-f1c4-06… 104.18.14.24 - View →
2026-08-13 https://webmail.secure-revolut.com 91.195.240.94 - View →
2026-08-12 https://cpanel.secure-revolut.com 91.195.240.94 - View →
2026-08-09 https://webdisk.secure-revolut.com 91.195.240.94 - View →
2026-07-23 https://revolut-capital.net 188.114.96.3 - View →
2026-07-06 https://revolut-gapps.club 104.21.52.221 Google Trust Services View →
2026-05-14 https://revolutionaryae.com 15.197.240.20 GoDaddy.com View →
2026-05-12 https://revolut.s-host.net 185.253.218.120 R12 View →
2026-05-12 https://revolut.s-host.net/index.php 185.253.218.120 R12 View →
2026-05-06 https://eur.revolutionrvrc.com 104.21.38.42 Google Trust Services View →
2026-05-04 https://fr1-revolut.s-host.net/index.php 185.253.218.120 R13 View →
2026-05-04 https://fr1-revolut.s-host.net 185.253.218.120 R13 View →
2026-05-04 https://revolut.1-kyc.com/index.php 185.253.218.120 R12 View →
2026-05-04 https://revolut.1-kyc.com 185.253.218.120 R12 View →
2026-05-02 https://sso-revolut.s-host.net/card.html 185.253.218.120 R12 View →
2026-05-02 https://sso-revolut.s-host.net 185.253.218.120 R12 View →
2026-05-02 https://revolut.1-sso.com/card.html 185.253.218.120 R12 View →
2026-05-02 https://revolut.1-sso.com 185.253.218.120 R12 View →
2026-04-17 https://revolutionraceapps.com 104.18.74.116 Google Trust Services View →
2026-04-10 https://revolut.app.support.pl 116.203.152.183 R13 View →

AIHow to verify a real Revolut URL

  • Legitimate Revolut URLs always end in revolut.com (e.g. www.revolut.com, account.revolut.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Revolut.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open revolut.com from your browser bookmark or type the domain manually.
  • Real Revolut pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.