Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/revolut
Generated: Sat, 05 Sep 2026 11:30:27 GMT
Target Website: revolut.com
Overall Trust Score: 87/100 (Trusted)
revolut.com
Trusted
Scanned: Sep 5, 11:30 AMTRUST SCORE
87
CONFIDENT
Low Risk
87/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
87/100 — trusted. Long-established domain (20.3 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Let's Encrypt, CN=YR2
Threat Status
CleanClean
No blacklists or malware
Domain Age
20.3 years20.3 years
Registered 5/4/2006
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
162.159.140.233162.159.140.233
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
84 / 10084 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (119ms)
- Served through Cloudflare
- 2 address record(s) resolved
- 4 authoritative nameservers
- Domain registered 20+ years ago
- Owner information disclosed
- Valid SSL / TLS certificate active
Warnings
- Site returned HTTP 403
- Missing Content Security Policy
- No mobile viewport meta tag
- Page has no <title>
- No privacy policy found
- No terms of service found
- No contact page found
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- INWX GmbH
- Creation Date
- May 4, 2006 (20.3 years ago)
- Last Updated
- July 27, 2026
- Registry Expiry Date
- May 4, 2032
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited
ICANN Status Badges
client transfer prohibited
Domain registered 20+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via INWX GmbH
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policy
All Response Headers (20)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
- IPv4 Addresses (A)
- 162.159.140.233, 172.66.0.231
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt2.aspmx.l.google.com (Priority: 5), alt1.aspmx.l.google.com (Priority: 5), alt4.aspmx.l.google.com (Priority: 10), alt3.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns-cloud-d2.googledomains.com, ns-cloud-d1.googledomains.com, ns-cloud-d3.googledomains.com, ns-cloud-d4.googledomains.com
- TXT Records Found
- 52 TXT verification records
A Records (IPv4)
162.159.140.233172.66.0.231
TXT Verification Records
mtc=YmEyYzAwNWUtZmE2ZS00NGUxLThjODYtMDRlZGRlMWUwN2Iy
jamf-site-verification=k8h7_eApcP1vEEE3x5TlkA
Foxit-domain-verification=f54a9f4d26a25ebdbd5447ac0013d0de
google-site-verification=CU5aHHDFaIS7rmPsqSE0Pwt2WXNyZt0YBnoiG3A3Rqc
google-site-verification=J50mEx511qzmeTPOsUU3aZKLmzw6fKn1loRDuzfppUM
ORUvC5FWkczlsgpQD41EiQ
amazonses:q7YOwQ1cLMnGLTRksFWhJMsh+i8Ajg08QbY8aSgnrG0=
anthropic-domain-verification-5fpm85=h9V4qLU6UpKu0vTH3VjnBZ6u3
_58tw41qgnggbur4s48p0gmeds1w2n4r
35039d909ec30a13dbc9f3894c6ca239f29844c1322b7e64d695273872dd49b6
docusign=e89be285-c58c-436a-9483-c0bfa2ca9b16
wiz-domain-verification=5855698809e48702af531b9d8049dbab0e250153fdebc3d712611253db1cf329
VISA=97A654000FAB3C062CAC3619E9F9C0E6
google-site-verification=OXSc6c_1hvbBupLkGnAojCeg21KLxS9_0hJm4Fl5KQs
067ad03f127e069f7f7aa2360cf866845c0f3f35a71d667e7d1c8dc1cd6f384d
apple-domain-verification=9QFO4rtc1CwwuJZW
adobe-idp-site-verification=8b010750c67cbf46c5be78c2e71a28f0211964e09395094a3da0b494dbc651f3
f1d42c8c84f7179e61cd0d3fdb5da375bd081e44090c7769936e9f0aca343cf9
MS=ms73364798
atlassian-domain-verification=3f09F8xwF6p3RmwdwQJHxQdjb8gaKNMWriwUv1Q084JbPSvRNV+HM63xtoL72ENj
08bc6f84b232f61558b5c23cfc326216c3e752e58407265048ba5a98d7057001
v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.atlassian.net include:_spf.salesforce.com include:_spf.sparkpostmail.com ~all
678189f51b3ce2a5d67c166a8ac777440e0c993a23b84d301f725bb84997b148
too3o9112f5ioqpu133a5kgl6i
mtc=NDljMjNkNmYtNTVkZS00MjI2LTg2M2UtYzdhZDcyZGY2NjRj
_sq9cnlva91hma9r9attizpaqeis9ovp
jetbrains-domain-verification=dsa98mjgew5wx4h64rum7zitj
openai-domain-verification=dv-zeXdbzLrKAKVTQrTEUoPzdap
VISA=E08F11962574D50E1C9C150D6CD09EB8
google-site-verification=xX_fEjrjlZ3HH1z3z0hRZMt7ddvhhqt5lMzm_z46Qrg
zapier-domain-verification-challenge=ba39b827-8ec9-4497-b017-72aa7de4f46c
cursor-domain-verification-sy3hkv=1ZyJzWDtlr5B2kUt7nzYB62MB
862281804
drift-domain-verification=2b5de3adf04e3120a8c9605ed8fbe18280867c93162d8b8a810414a0ed94afb4
_szxjgexeof7rmpa3i038fmje0djgyjt
436a12cf57e2df2e19e3bd4cccd5229d6950ac80bd6fa3781de3ef3d2a9fbf9a
docusign=9aa886dc-315c-406b-a75c-a6bf6db6e8bc
VDJzVD16Woc2iWGs1fFQ2QOf+0ts75OHbERHEVFG7oU=
Certeurope=Fgiq7Pvj9CzR824G74JZHrr2MeF3w8
00D8d000001xy3T=1TBTu000000003F
google-site-verification=FvyMDL1jIHpmqVM_Row8cOojeQB3-kIRT2oXNalAYxY
5a3687060ef94980f6da0f909097b8d8f2e8b8ac5718e0fbd17bb0596ef3121f
google-site-verification=QpnQ6Qe8tL0izHlvEBNMZ1CJPagyXcRrx5_3QRoqhEc
364227379ef2a02c552e43077718593604053c2fbeee4b0a12c370b8cf4ce088
atlassian-sending-domain-verification=4952210b-0a37-4050-9a55-ce2c58fa8b28
h1-domain-verification=jwDB6VRcNMMMKRdsNpP2nDe3fTwSEa7H84eZm2ai62vx13Bu
60a5b08a2f480aef4991e6ff691b557fa15ebdec803229cdc855df6bcc995f69
verification_token=6nJlA4vmsz9FGxML8s5RKThu1
VISA=C2C643F71D0B04C4589EE3BBEE8620F6
pardot969163=bcff4cc1d8a139eeb479882477f5ce35bf6c3ad61dd5a03b9c44aeaf26358da4
google-site-verification=w-FzBu1VDsU0MXdPY53ZXz-KYtXb-gmzZTr-QCzIKVc
atlassian-domain-verification=Mzbg6ekGcURWMWeIFPczmNvMDO5QI6FVn3RlnpBVNX+H8EpKVkcJjvwLGVkqUxAa
2 address record(s) resolved
+4
4 authoritative nameservers
+2
- Registrable Domain
- revolut.com
- Registrar Organization
- INWX GmbH
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited
- Delegated Authoritative Nameservers
- ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, ns-cloud-d3.googledomains.com, ns-cloud-d4.googledomains.com
- Registration Lifecycle
- Registered: 2006 → Expires: 2032
Nameservers (NS)
ns-cloud-d1.googledomains.comns-cloud-d2.googledomains.comns-cloud-d3.googledomains.comns-cloud-d4.googledomains.com
Domain registered 20+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via INWX GmbH
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.atlassian.net include:_spf.salesforce.com include:_spf.sparkpostmail.com ~all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:revolut@rua.netcraft.com,mailto:dmarc@revolut.com; ruf=mailto:revolut@ruf.netcraft.com,mailto:dmarc@revolut.com;
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- revolut
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (revolut)
- Typosquatting Risk
- Clean
revolut is the real brand's registered domain
The root label matches the brand exactly — this IS the brand's own domain.
+10
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- —
- Document Language
- en-GB
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width
- Generator Software
- —
1 technologies detected
Cloudflare
No mobile viewport meta tag
The page won't render correctly on phones without a viewport tag.
-3
Page has no <title>
Well-maintained sites always set a page title.
-3
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 119 ms
- Payload Body Size
- 852.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
87/100 — trusted. Long-established domain (20.3 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 524,103 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 162.159.140.233
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.revolut.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://revolut.com/ → https://www.revolut.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (119ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Let's Encrypt, CN=YR2
- Subject Common Name (CN)
- revolut.com
- Validity Period
- 36 days remaining (Expires: 2026-10-12T05:16:30)
- Subject Alternative Names (SANs)
- 30 domains protected
- Certificates Logged (CT)
- 1163 certs recorded
Subject Alternative Names (Sample)
aqueduct.revolut.comae-eos.revolut.combroker.spei.revolut.combusinessbrand.revolut.comvop.revolut.comwww.credit.revolut.comrevolut.comae-airflow.revolut.compl.revolut.comin-aqueduct.revolut.comin-data-talos.revolut.comform.revolut.combnrvpnclient.revolut.comgrowth-performance.revolut.commx-data-talos.revolut.comdata-talos.revolut.comdata-portal.revolut.combrand.revolut.comget.revolut.comtrustcentre.revolut.com+10 more
Valid SSL / TLS certificate active
Issued by C=US, O=Let's Encrypt, CN=YR2, valid for 36 remaining days.
+10
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.revolut.com/sitemap-index.xml
- Disallow Rules Count
- 57 rules
View Raw robots.txt
# * User-agent: * Allow: /sitemap-*.xml* Disallow: /api/ Disallow: */email-verification Disallow: */help-centre Disallow: /*.json$ Disallow: /*_buildManifest.js$ Disallow: /*_middlewareManifest.js$ Disallow: /*_ssgManifest.js$ Disallow: /*embedded Disallow: /*/query:* Disallow: *?* Allow: *?amount= Allow: *?amount-to= Disallow: */api/*amount* # Localisation send money Disallow: /en-AT/money-transfer/send-money Disallow: /en-BE/money-transfer/send-money Disallow: /en-BG/money-transfer/send-money Disallow: /en-BR/money-transfer/send-money Disallow: /en-CL/money-transfer/send-money Disallow: /en-CZ/money-transfer/send-money Disallow: /en-CZ/money-transfer/send-money Disallow: /en-DE/money-transfer/send-money Disallow: /en-ES/money-transfer/send-money Disallow: /en-FR/money-transfer/send-money Disallow: /en-GR/money-transfer/send-money Disallow: /en-HR/money-transfer/send-money Disallow: /en-HU/money-transfer/send-money Disallow: /en-IT/money-transfer/send-money Disallow: /en-JP/money-transfer/send-money Disallow: /en-LT/money-transfer/send-money Disallow: /en-MX/money-transfer/send-money Disallow: /en-PL/money-transfer/send-money Disallow: /en-PT/money-transfer/send-money Disallow: /en-RO/money-transfer/send-money Disallow: /en-SK/money-transfer/send-money Disallow: /en-EC/money-transfer/send-money Disallow: /en-EE/money-transfer/send-money Disallow: /en-AZ/money-transfer/send-money Disallow: /en-LV/money-transfer/send-money Disallow: */international-transfers/ # Localisation currency converter Disallow: /en-ES/currency-converter/convert Disallow: /en-BG/currency-converter/convert Disallow: /en-CZ/currency-converter/convert Disallow: /en-DA/currency-converter/convert Disallow: /en-DE/currency-converter/convert Disallow: /en-GR/currency-converter/convert Disallow: /en-AZ/currency-converter/convert Disallow: /en-FR/currency-converter/convert Disallow: /en-HR/currency-converter/convert Disallow: /en-HU/currency-converter/convert Disallow: /en-IT/currency-converter/convert Disallow: /en-JP/currency-converter/convert Disallow: /en-LT/currency-converter/convert Disallow: /en-NL/currency-converter/convert Disallow: /en-PL/currency-converter/convert Disallow: /en-BR/currency-converter/convert Disallow: /en-RO/currency-converter/convert Disallow: /en-LV/currency-converter/convert Disallow: /en-SE/currency-converter/convert Disallow: /en-SL/currency-converter/convert # Sitemap, Host Sitemap: https://www.revolut.com/sitemap-index.xml Host: https://www.revolut.com
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
38
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.71s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk