passive-crypto-ch[.]net
“Passive Crypto Switzerland — Offizielle Website”
Resumo das evidências
This domain, passive-crypto-ch.net, is confirmed to operate as a fraudulent investment platform impersonating Revolut's cryptocurrency services. Analysis indicates the site specifically targets users seeking passive crypto income opportunities, presenting itself as an official Swiss-based Revolut crypto portal under the page title 'Passive Crypto Switzerland — Offizielle Website.' The infrastructure is designed to deceive victims into transferring cryptocurrency or divulging financial credentials under the pretense of legitimate Revolut offerings, exploiting the brand's reputation in digital banking and crypto services. Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain was registered on October 21, 2025, through Dynadot LLC, with no SSL certificate implemented, exposing user interactions to interception. It resolves to IP address 82.221.130.74, hosted in Iceland under AS50613 (Advania Island ehf). Security vendor detection on VirusTotal shows 14 out of 95 engines flagging the domain as malicious. Additionally, the domain appears on one security blocklist and is actively blocked by at least one anti-phishing system. Users who visited passive-crypto-ch.net should immediately revoke any credentials entered on the site and monitor financial accounts for unauthorized transactions. Given the domain's focus on cryptocurrency investment fraud, victims should also check connected crypto wallet addresses for suspicious outgoing transfers. Security teams should update blocklists with the domain and IP address 82.221.130.74, while organizations should alert employees to the specific threat vector of fake Revolut crypto investment portals. The domain's current offline status does not eliminate risk, as threat actors may reactivate similar infrastructure under new domains.
Data Coverage
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 13/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
VirusTotal
14 → 13
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of passive-crypto-ch.net · checked Mar 2, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo