troll[.]officialco[.]in

The domain troll.officialco.in is a confirmed phishing site engaging in brand impersonation targeting Revolut users. It presents itself as a cryptocurrency airdrop scam, a specific threat type designed to deceive victims into disclosing sensitive information or transferring digital assets under false pretenses. No drainer kit was identified in this campaign. As of the latest verification, troll.officialco.in has been taken offline, though prior activity remains a concern for those who may have interacted with it.

Technical indicators confirm the elevated risk posed by troll.officialco.in. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appears on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolved to the IP address 104.21.26.4, hosted on Cloudflare’s infrastructure in the US. The SSL certificate was issued by WE1, and the observed page title was 'TROLL | Airdrop'. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score was 0 out of 100. No registrar information was available for this domain.

Individuals who visited troll.officialco.in should take immediate action to secure their accounts and assets. For cryptocurrency-related scams, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. For credential or login phishing, change passwords on the legitimate Revolut platform, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the domain to relevant authorities, such as local cybercrime units or platforms like the Anti-Phishing Working Group (APWG), to aid in broader mitigation efforts.