register-yaranaika[.]live

The domain register-yaranaika.live is a phishing site engaged in brand impersonation targeting Revolut users, specifically designed to facilitate cryptocurrency scams. It does not employ a known drainer kit but presents itself as a legitimate Revolut service to deceive victims into disclosing sensitive information or transferring digital assets. As of the latest verification, register-yaranaika.live has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical indicators confirm the domain's malicious nature. Register-yaranaika.live was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, while appearing on 2 security blocklists (PhishDestroy and ScamSniffer). The domain was created on February 21, 2026, and resolved to the IP address 104.21.93.156, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was 'やらないか | Airdrop'. No registrar information is available for this domain.

Individuals who interacted with register-yaranaika.live should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for Revolut and any other accounts where the same credentials may have been reused, and enable two-factor authentication. Report the incident to Revolut's official fraud team and submit the domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.