memesdrop[.]lol

Analysis conducted on July 24, 2026 indicates that the domain memesdrop.lol was registered on February 21, 2026 through Eranet International Limited and is hosted on Cloudflare infrastructure (ASN 13335) with the IP address 172.67.212.224 located in the United States. The authoritative name servers are nadia.ns.cloudflare.com and nitin.ns.cloudflare.com. No TLS certificate is presented, confirming the absence of HTTPS protection. The public page title returned by the server is “MEMES | Airdrop”, and the site is classified as a crypto‑airdrop scam that impersonates the financial service brand Revolut.

Automated scanning on VirusTotal reported that five of ninety‑three AV engines flagged the domain, and the domain appears on four independent security blocklists. Additional defensive products, including PhishDestroy, MetaMask, ScamSniffer and SEAL, have recorded the host as malicious and actively block traffic to it. The site has been taken offline at the time of analysis. Evidence confirms the use of the publicly available “Airdrop Scam” phishing kit, which is commonly employed to lure victims with promises of free cryptocurrency.

While the exact content of the landing page was not captured, the combination of brand impersonation, crypto‑airdrop narrative, and the absence of SSL suggests an intent to harvest credentials or wallet information from unsuspecting Revolut users. Uncertainty remains regarding the current activity of the domain beyond the offline status, as no live page content is available and the detection footprint may evolve. Defenders should continue to block memesdrop.lol at network perimeters and endpoint filters, monitor the associated IP address and Cloudflare name servers for any re‑registration, and add the domain to internal allow‑lists as a known malicious indicator.