Phishing detection: webmail.secure-revolut.com

Revolut
https://webmail.secure-revolut.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain webmail.secure-revolut.com7 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 91.195.240.94
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://webmail.secure-revolut.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
27 low suspicionheuristic risk score · not a probability
Keyword matchBrand + login tokenGoogle Safe Browsing
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Combosquat domain embeds the Revolut brand within a security-themed host mimicking a Revolut webmail login portal. Flagged as social engineering by Google Safe Browsing and hosted by SEDO in Germany. Likely harvests Revolut account credentials.

Brand + login tokenGoogle Safe BrowsingCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-14 · confidence 75%
Domain & Network
Whois
Registrar Name.com, Inc.
Network
IP 91.195.240.94
Country GermanyGermany
Hosting SEDO GmbH
ASN AS47846
TLS Cert -
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
fifa-talenthub.com 20 same registrar same favicon
active 2026-08-09
Top 1 of 1 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Registrar Name.com, Inc.
abuse@name.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-13 17:26 UTC  ·  Last refreshed 2026-08-16 07:30 UTC