crypto-yield-ca[.]com

The domain crypto-yield-ca.com is identified as a brand impersonation threat specifically targeting Revolut, a financial services provider. Analysis confirms this domain was designed to deceive users by presenting itself as an official crypto yield platform associated with Revolut. The domain is currently offline, though prior activity indicates malicious intent to harvest credentials or facilitate fraudulent transactions. Infrastructure analysis reveals the domain was registered on October 21, 2025, through Dynadot LLC and resolved to the IP address 82.221.130.74. Security vendor assessments show 11 of 95 VirusTotal engines flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Nginx as the web server and Google Tag Manager for tracking, which may have been used to monitor victim interactions. Given the domain's current offline status, no active threat is present; however, historical indicators suggest it was part of a broader campaign targeting financial service users. Organizations and individuals are advised to monitor for similar domains using the same IP range or registrar. Blocking the IP 82.221.130.74 and implementing DNS-based filtering for newly registered domains under Dynadot LLC may mitigate future risks. Users should verify all communications and offers directly through Revolut's official channels before engaging with any financial services or crypto-related promotions.