blofinhub[.]net

The domain blofinhub.net has been identified as a brand impersonation threat specifically targeting Revolut. This domain is currently offline, but during its active period it posed a significant risk to users who may have been deceived into believing they were interacting with legitimate Revolut services. The site was registered on February 28, 2025, through ENOM, INC., and resolved to IP address 188.114.97.3. Its SSL certificate was issued by GoDaddy.com, Inc. via the Go Daddy Secure Certificate Authority - G2.

On VirusTotal, 10 out of 95 security vendors flagged this domain as malicious, indicating a high level of consensus among security tools. The domain also appeared on 1 security blocklist and was referenced in 1 threat intelligence pulse on AlienVault OTX. These data points collectively suggest that blofinhub.net was actively used in a phishing campaign designed to steal credentials or sensitive information from Revolut users. The page title "BlofinHub" was likely used to create a false sense of legitimacy, though it does not directly mimic Revolut's branding.

Given that the domain is now offline, the immediate risk is reduced, but users who may have interacted with this site should remain vigilant. PhishDestroy recommends that anyone who visited blofinhub.net or provided personal or financial information should contact Revolut's official support immediately and monitor their accounts for suspicious activity. To avoid falling victim to similar threats, always verify URLs before entering credentials, enable multi-factor authentication, and use trusted security tools to check domain reputations. Remember that legitimate financial institutions will never ask for sensitive information through unsolicited links or pop-up forms.