revoko[.]co

This domain, revoko.co, is flagged as a high-risk brand impersonation threat targeting Google. Registered on April 22, 2026, through NAMECHEAP INC, it remains active as of July 12, 2026. The page title, 'Revoko — L’IA répond à vos avis Google Business Profile', indicates a scam designed to appear as a service for managing Google Business Profile reviews using artificial intelligence. Infrastructure analysis reveals the domain resolves to IP address 64.29.17.65, hosted by Vercel, Inc in the United States, with nameservers chuck.ns.cloudflare.com and kira.ns.cloudflare.com. An SSL certificate from Let's Encrypt (R12) is present, and the HTTP status is a 307 redirect. VirusTotal data shows 2 of 94 security vendors flagging this domain, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100. The phishing kit is identified as an Airdrop Scam, though the exact mechanism of the scam—whether it involves credential harvesting, financial fraud, or other deception—is not specified in the available intelligence. Defenders should block this domain at the network and email gateway levels, monitor for related subdomains or sibling domains registered through NAMECHEAP, and educate users about unsolicited offers related to Google Business Profile management. The use of Cloudflare nameservers and Vercel hosting suggests the attacker may be leveraging legitimate platforms to evade detection; further investigation into the redirect chain and any associated landing pages is recommended to fully understand the attack vector.