# PhishDestroy domain threat record: claimedperks.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/claimedperks.com/ Machine-readable companion: https://phishdestroy.io/domain/claimedperks.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 14:53:14 UTC - Last availability or vendor check: 2026-10-23 14:59:27 UTC - Stored record updated: 2026-10-23 16:30:24 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: revolut ## Stored infrastructure - Observed IP address: 216.150.1.1 - Registrar in stored WHOIS data: NameCheap, Inc. - Last stored HTTP status: 308 - Registration date (registry RDAP, claimedperks.com): 2026-10-20 04:23:07 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16944-9718-716e-8965-0c7c8684895e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/claimedperks.com - Certificate Transparency search: https://crt.sh/?q=%25.claimedperks.com - Web Archive lookup: https://web.archive.org/web/*/https://claimedperks.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the site as malicious because it pretends to be Revolut and offers a £500 gift‑card reward. The page was first observed by PhishDestroy on 2026-10-23, three days after the domain was registered, and returned a 308 redirect to the www subdomain followed by an HTTP 200 response. How the scam works In a typical brand‑impersonation reward scam, attackers publish a page that mimics a trusted financial service and promise a valuable gift card to lure users into entering login credentials or personal data, which can then be harvested for account takeover or resale. Evidence The recorded page title reads “Revolut Rewards — Claim Your £500 Gift Card”. VirusTotal analysis on 2026-10-22 reported one malicious detection out of 92 engines (Bfore.Ai PreCrime). Google Safe Browsing checked on 2026-10-23 did not flag the URL. urlscan.io captured the site on 2026-10-22, assigning a malicious engine score of 84 but an overall clean verdict. PhishDestroy’s internal blocklist marks the domain as malicious; external blocklists showed zero hits on the same date, and OTX listed no pulses. Infrastructure The domain was registered with NameCheap on 2026-10-20. It was observed pointing to IP address 216.150.1.1, which belongs to Amazon.com, Inc., and the page was delivered via Vercel infrastructure. The TLS certificate, issued by Let’s Encrypt/YR1, was valid from 2026-10-20 to 2027-01-18. What to do Visitors should avoid entering any Revolut credentials or personal information on the site; if they have, they should change passwords and enable two‑factor authentication on the affected accounts. Organizations should block the domain, monitor DNS and web traffic for connections to it, and review logs for any credential submissions. The PhishDestroy blocklist entry can be used to automate detection and prevention. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1626f-3fb1-7201-af5b-468f74e1b360/ Cloudflare Radar report: https://radar.cloudflare.com/scan/215dc891-25e9-48bb-bab0-043d8d311f86 Stored capture screenshot: https://urlscan.io/screenshots/01a1626f-3fb1-7201-af5b-468f74e1b360.png Cloudflare Radar screenshot (2026-10-23T14:55:19Z): https://screenshots.phishdestroy.io/cf/215dc891-25e9-48bb-bab0-043d8d311f86.png VirusTotal report: https://www.virustotal.com/gui/domain/claimedperks.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=claimedperks.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 14:56:55 UTC ## Stored page captures - Primary capture: https://i.ibb.co/twzVYsHH/32d89fa06a98.png Captured: 2026-10-23 14:59:27 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a16944-9718-716e-8965-0c7c8684895e.png Captured: 2026-10-23 14:59:27 UTC Source report: https://urlscan.io/result/01a16944-9718-716e-8965-0c7c8684895e/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a1626f-3fb1-7201-af5b-468f74e1b360.png Captured: 2026-10-23 14:53:14 UTC Source report: https://urlscan.io/result/01a16944-9718-716e-8965-0c7c8684895e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/215dc891-25e9-48bb-bab0-043d8d311f86.png Captured: 2026-10-23 14:55:19 UTC Source report: https://radar.cloudflare.com/scan/215dc891-25e9-48bb-bab0-043d8d311f86 SHA-256: 7b77be2cc9da3a407fe245485fc8b2d32eb9af487ca85a54910fbd7177417bcd - URLQuery: https://screenshots.phishdestroy.io/uq/385e4409-ce25-4ccd-aef5-ad494b07840e.png Source report: https://urlquery.net/report/385e4409-ce25-4ccd-aef5-ad494b07840e SHA-256: d3028999c9b8fec5c298ab35283d1559a08ddade2ddfd1abfbe28563302d2920 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1626f-3fb1-7201-af5b-468f74e1b360.png Captured: 2026-10-22 07:07:09 UTC Source report: https://urlscan.io/result/01a1626f-3fb1-7201-af5b-468f74e1b360/ SHA-256: 48274ed57e9ff33036891eb598dfd317a67303ba0149b014b14c46593dd7a85e - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16945-d1c6-700e-a9f8-5b323f4683e0.png Captured: 2026-10-23 14:59:12 UTC Source report: https://urlscan.io/result/01a16945-d1c6-700e-a9f8-5b323f4683e0/ SHA-256: 1b67edfaae4a33a4990527dea456a9d29cfd9a9f586ba430d75f6cd8a933b514 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T16:23:27Z", "uuid": "01a16944-9718-716e-8965-0c7c8684895e", "scanned_at": "2026-10-23T14:57:50Z", "final_url": "https://www.claimedperks.com/", "status": 200, "redirected": "parent-domain", "redirects": [ { "to": "https://claimedperks.com/", "from": "http://claimedperks.com/", "status": 307 }, { "to": "https://www.claimedperks.com/", "from": "https://claimedperks.com/", "status": 308 } ], "ip": "216.150.1.65", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com", "claimedperks.com" ], "ips": [ "142.251.13.94", "192.178.183.95", "216.150.1.65", "216.150.1.1" ], "asns": [ "15169", "16509" ], "countries": [ "US" ], "link_domains": [ "giftclick.org" ], "doc_hash": "2b2d4db57be7432053fd31f73664be0fab96b5a6f85cf8f50cc0cec1b3854863", "script_hashes": [ "724e558fd0a73605563294ef9fb394c36e7da716c396f973a5719b8bd03b9922" ], "globals": [ "__reactRouterVersion" ], "tls": { "san": [ "www.claimedperks.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "www.claimedperks.com", "protocol": "TLS 1.3", "valid_to": "2027-01-18T03:30:32Z", "valid_from": "2026-10-20T03:30:33Z" }, "domain_age_days": 3, "apex_age_days": 3, "tls_age_days": 3, "tls_valid_days": 89, "requests": 9, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 83, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "revolut" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Revolut" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T14:55:49Z", "uuid": "215dc891-25e9-48bb-bab0-043d8d311f86", "scanned_at": "2026-10-23T14:55:19Z", "final_url": "https://www.claimedperks.com/", "status": 200, "redirected": "subdomain", "history": [ { "url": "https://claimedperks.com/", "status": 308 }, { "url": "https://www.claimedperks.com/", "status": 200 } ], "dom_hash": "385da687953fb48d6490fba98c09e2a59dfaadc6e1ce130324729651df339d6b", "doc_hash": "2b2d4db57be7432053fd31f73664be0fab96b5a6f85cf8f50cc0cec1b3854863", "domain_risks": [ "Newly Seen Domains", "Security Risks", "Coupons", "Shopping & Auctions" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "claimedperks.com", "type": "A", "value": "216.150.1.1" }, { "name": "www.claimedperks.com", "type": "CNAME", "value": "492e44f55673ce39.vercel-dns-017.com" }, { "name": "www.claimedperks.com", "type": "CNAME", "value": "492e44f55673ce39.vercel-dns-017.com" } ], "dnssec_valid": false, "ip": "216.150.1.193", "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-20T04:23:07Z", "updated": "2026-10-20T04:23:11Z", "expires": "2027-10-20T04:23:07Z", "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T14:54:46Z", "analysis_at": "2026-10-22T15:02:49Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 0, "undetected": 37 }, "detections": { "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "registrar": "NAMECHEAP INC", "created": "2026-10-20T04:23:07Z", "expires": "2027-10-20T04:23:07Z", "updated": "2026-10-20T04:23:11Z", "first_seen": "2026-10-20T05:07:36Z", "dns": [ { "ttl": 1800, "type": "MX", "value": "eforward4.registrar-servers.com", "priority": 15 }, { "ttl": 1800, "type": "NS", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "TXT", "value": "v=spf1 include:spf.efwd.registrar-servers.com ~all" }, { "ttl": 1800, "type": "MX", "value": "eforward3.registrar-servers.com", "priority": 10 }, { "ttl": 3601, "type": "SOA", "rname": "hostmaster.registrar-servers.com", "value": "dns1.registrar-servers.com" }, { "ttl": 1799, "type": "A", "value": "216.150.1.1" }, { "ttl": 1800, "type": "NS", "value": "dns2.registrar-servers.com" }, { "ttl": 1800, "type": "MX", "value": "eforward2.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward1.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward5.registrar-servers.com", "priority": 20 } ], "dns_at": "2026-10-22T15:08:18Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "claimedperks.com" ], "issuer": "Let's Encrypt / YR1", "serial": "52d9f1f323a8e54f96c6418a896c4cb8ac9", "sha256": "6a3bb7e7e0797b916f6a2b2da120a12f075433a8da86248a1232d4d6197fef90", "subject": "claimedperks.com", "valid_to": "2027-01-18T03:30:32Z", "valid_from": "2026-10-20T03:30:33Z" }, "whois": { "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068", "registrar_url": "http://www.namecheap.com", "created": "2026-10-20T04:23:07Z", "updated": "1-01-01T00:00:00Z", "expires": "2027-10-20T04:23:07Z", "status": [ "addPeriod", "clientTransferProhibited" ], "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "registration": "2026-10-20T04:23:07Z", "registrar expiration": "2027-10-20T04:23:07Z", "last update of RDAP database": "2026-10-20T04:29:24Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T14:56:03Z", "mail_config": { "mx": [ "eforward5.registrar-servers.com", "eforward1.registrar-servers.com", "eforward2.registrar-servers.com", "eforward3.registrar-servers.com", "eforward4.registrar-servers.com" ], "spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all", "spf_lookups": 1 }, "caa_records": { "domain": "claimedperks.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-23T14:54:06Z", "first": "2026-10-23T14:54:06Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1413 }, "robots_txt": { "agents": [ "Googlebot", "Bingbot", "Twitterbot", "facebookexternalhit", "*" ], "present": true }, "social_tags": { "title": "Revolut Rewards — Claim Your £500 Gift Card", "author": "Revolut Rewards", "ogType": "website", "ogImage": "https://lovable.dev/opengraph-image-p98pqg.png", "ogTitle": "Revolut Rewards — Claim Your £500 Gift Card", "description": "Claim your £500 Revolut gift card. Answer quick questions and complete simple steps to redeem your reward.", "twitterCard": "summary_large_image", "ogDescription": "Claim your £500 Revolut gift card today." }, "trackers": { "requests": 5, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 308, "timings": { "dns": 7, "tls": 11, "wait": 11, "connect": 6, "download": 1 }, "response_ms": 36 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 1321, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "156.154.133.200", "host": "dns2.registrar-servers.com" }, { "ip": "156.154.132.200", "host": "dns1.registrar-servers.com" } ], "zone": "claimedperks.com" }, "location": { "ip": "216.150.1.1", "asn": "16509", "org": "Amazon.com, Inc.", "city": "Walnut", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "claimedperks.com" }, "dns": { "A": [ "216.150.1.1" ], "MX": [ "{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}", "{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}" ], "NS": [ "dns2.registrar-servers.com", "dns1.registrar-servers.com" ], "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1792470509, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}", "TXT": [ "v=spf1 include:spf.efwd.registrar-servers.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=63072000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "216.150.1.1", "family": 4 }, "redirects": { "chain": [ "https://claimedperks.com", "https://www.claimedperks.com/" ], "count": 1 }, "subdomains": { "count": 1, "subdomains": [ "www.claimedperks.com" ] }, "tech_stack": { "technologies": [ "Vercel", "Google Font API", "HSTS", "Open Graph" ] }, "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-20T04:23:07Z", "updated": "2026-10-20T04:23:11Z", "expires": "2027-10-20T04:23:07Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] }, "headers": { "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } } } } ```