# revert-f.finance — MALICIOUS

> The domain revert-f.finance was flagged for phishing and is now offline. Learn how this scam worked and what to do if you encountered it.

## Summary
PhishDestroy has identified revert-f.finance as a high-risk phishing domain designed to deceive users and steal sensitive information. This domain was flagged by multiple security vendors and appeared on several blocklists before being taken offline.

The phishing scheme used by revert-f.finance involves mimicking legitimate financial services to trick visitors into entering personal data. The site’s page titled "revert" likely aimed to create a sense of urgency or legitimacy. Users who accessed this domain risked exposure to credential theft and other cyber fraud.

If you have visited revert-f.finance, it’s important to immediately change any passwords you may have entered and monitor your accounts for suspicious activity. Avoid clicking on suspicious links and report any phishing attempts to your IT or security team. Staying vigilant and informed helps protect against these evolving online threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: revert

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 94.26.255.31
- IP Country: RU
- IP City: Saint Petersburg
- IP Org: AS49505 JSC Selectel
- SSL Issuer: R10

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Seclookup", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019868db-f5e2-748e-9ea7-cef9ead51ea9.png
- PhishDestroy: https://phishdestroy.io/domain/revert-f.finance/
- LLM endpoint: https://phishdestroy.io/domain/revert-f.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/revert-f.finance/
Last updated: 2026-03-19