radifixit[.]com

This domain, radifixit.com, is identified as a high-risk brand impersonation threat targeting users of the Revolut financial platform. The site presents itself as a legitimate troubleshooting portal under the title 'Wallet Troubleshooter,' likely designed to deceive victims into entering sensitive credentials or financial details. Given the domain's association with known phishing infrastructure and its explicit mimicry of Revolut's branding, it poses a significant risk of credential theft, unauthorized account access, or financial fraud. The page may also attempt to distribute malicious payloads or redirect users to secondary phishing endpoints, further amplifying the potential for harm. Analysis indicates that radifixit.com was registered on December 19, 2025, through NameCheap, Inc., a registrar frequently observed in phishing campaigns. The domain resolves to the IP address 64.29.17.65, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. Detection metrics reveal that 17 out of 95 security vendors on VirusTotal have flagged this domain as malicious, while it appears on six distinct security blocklists. The absence of an SSL certificate further undermines its legitimacy, as modern financial services universally employ encrypted connections. Additionally, the domain has been proactively blocked by multiple security frameworks, including those specializing in cryptocurrency and wallet protection. Users who have interacted with radifixit.com should immediately cease all engagement and take corrective measures. If credentials or financial details were entered, affected individuals must change passwords for all associated accounts, enable multi-factor authentication where available, and monitor for unauthorized transactions. System scans using updated security tools are recommended to detect potential malware or backdoors. Financial institutions should be notified if suspicious activity is observed. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts, as threat actors often rotate infrastructure to evade detection.