chainwise[.]in

The domain chainwise.in is a phishing site engaged in brand impersonation targeting Revolut users. It presents itself as a legitimate financial service under the false identity of the Revolut brand, attempting to deceive victims into disclosing login credentials or other sensitive information. As of the latest verification, chainwise.in has been taken offline, but it remains a documented threat due to its recent malicious activity.

Technical analysis reveals that chainwise.in was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned it a trust score of 0 out of 100. The domain appears on one security blocklist, specifically PhishDestroy. Registered through Dynadot LLC on February 21, 2026, it resolves to the IP address 107.172.61.186, hosted by AS36352 (HostPapa) in the United States. The SSL certificate is issued by R11, and the observed page title was 'ChainWise Company'. The domain uses nameservers ns3.yougoserver.com and ns4.yougoserver.com, with MX records pointing to itself.

Individuals who may have interacted with chainwise.in should immediately change their Revolut account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor financial accounts for suspicious activity and report any fraudulent transactions to Revolut support. Victims can also report the phishing domain to their email provider, browser security teams, or platforms like Google Safe Browsing or PhishTank to aid in broader threat mitigation.