moveandmoney[.]pages[.]dev

This domain, moveandmoney.pages.dev, presents itself as a legitimate comparison site for international money transfer services, specifically targeting expats with a fake "Wise vs Revolut vs Bank" review page. Analysis indicates the site is designed to harvest login credentials, financial details, or personal information under the guise of offering financial advice. The page title, "Money Transfer Comparison for Expats 2026 — Wise vs Revolut vs Bank | MoveAndMoney," closely mimics the branding of trusted financial service providers, increasing the likelihood of deception for users seeking genuine comparisons. Infrastructure analysis reveals several indicators supporting its malicious nature. The domain was registered on March 30, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.99, also associated with Cloudflare’s infrastructure in Canada. Despite its recent creation, the site has already been flagged by one security blocklist, though it remains undetected by VirusTotal, with 0 out of 95 engines identifying it as malicious. The SSL certificate is issued by Let’s Encrypt, a common practice among both legitimate and malicious sites to appear trustworthy. Users who have visited moveandmoney.pages.dev should take immediate action to mitigate potential risks. If any credentials or financial information were entered, reset passwords for all associated accounts, particularly those linked to Wise, Revolut, or banking services. Enable multi-factor authentication where available to add an additional layer of security. Monitor financial statements for unauthorized transactions and consider reporting the incident to relevant financial institutions or cybersecurity authorities. Avoid interacting with the domain further, and verify the legitimacy of any financial comparison sites through official channels before providing sensitive information.