claim[.]nanalabs[.]xyz

The domain claim.nanalabs.xyz has been identified as a confirmed brand impersonation threat specifically targeting Revolut. This phishing site is currently offline, but its recent activity posed an elevated risk to users. The site was created on August 1, 2025, and hosted on the IP address 64.29.17.1, with an SSL certificate issued by Let's Encrypt under the identifier R13. Registered through NameCheap, Inc., the domain presented a page titled 'Claim $NANA' to lure victims.

PhishDestroy's analysis reveals that claim.nanalabs.xyz was flagged by 1 security blocklist and received a detection rate of 1 out of 95 security vendors on VirusTotal, indicating limited but significant recognition of its malicious nature. The domain's registration via NameCheap and its use of a free SSL certificate are common tactics among phishing operations. The brand impersonation of Revolut, a well-known financial institution, underscores the threat's potential to deceive users into revealing sensitive financial information.

Although the site is currently offline, users should remain vigilant. PhishDestroy advises avoiding any interaction with claim.nanalabs.xyz and recommends reporting such domains to security authorities. For protection, ensure that banking credentials are only entered on official platforms and enable multi-factor authentication. If you suspect exposure, contact Revolut's support immediately and monitor accounts for unauthorized activity.