crypto-finance-ca[.]net

The domain crypto-finance-ca.net is a brand impersonation phishing site that poses an elevated risk. It impersonates the financial services brand Revolut and has been taken offline. Security assessments indicate that this domain could be used to deceive users into providing sensitive information, leading to potential financial or identity theft.

3 of 95 VirusTotal vendors, including CRDF, Gridinsoft, and SOCRadar, have flagged crypto-finance-ca.net as malicious. The domain is registered through Dynadot LLC and was created on October 21, 2025. It resolves to the IP address 82.221.130.74, which is located in Iceland under the control of AS50613 Advania Island ehf. The site appears on 1 security blocklist, specifically PhishDestroy, and uses an SSL certificate issued by Let's Encrypt / R13. The page title observed was 'Crypto Finance Canada — Official Site', and the technologies detected on the site include Nginx and Google Tag Manager.

If a user has interacted with crypto-finance-ca.net, they should take immediate steps to protect their information. For credential or login phishing, users should change their passwords for Revolut and any other accounts that may have been compromised, enable two-factor authentication, and monitor their accounts for any unauthorized activity. Users should also report the incident to Revolut and their local cybersecurity authorities. Reporting can be done through the official Revolut support channels or by submitting the domain to organizations like PhishTank or the Anti-Phishing Working Group.