revolut-team[.]com

The domain revolut-team.com was registered on 27 November 2025 through Shock Hosting LLC and is served by the authoritative nameservers ns1.shockhosting.com and ns2.shockhosting.com. DNS resolution points to the IPv4 address 210.16.64.147, which is currently listed on a single security blocklist and has been flagged by the PhishDestroy sinkhole as malicious. The domain appears in public threat‑intelligence feeds as a generic phishing operation, but no additional attribution such as a specific phishing kit or target brand has been disclosed.

VirusTotal has processed the domain with 95 scanning engines; none of the engines reported a detection, though the absence of a detection does not constitute confirmation of benign behavior. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, or trust‑score data has been published for this host, and the page title or content has not been captured in the available intelligence. At the time of writing the domain remains active and reachable.

Because the infrastructure is hosted by Shock Hosting, which is known to provide inexpensive, low‑verification hosting, the domain can be quickly re‑registered or moved to new IP space, increasing the need for continuous monitoring. Defensive actions should include adding revolut-team.com and its resolved IP 210.16.64.147 to outbound and inbound deny lists, configuring web‑proxy filters to block URLs that resolve to the address, and enabling telemetry to alert on future DNS queries for the domain or its nameservers. Analysts should also watch for any emergence of additional blocklist listings or detection signals from sandbox or reputation services, and consider submitting the domain to additional scanning platforms to enrich the evidence base.