copperinucoin[.]lol

The domain copperinucoin.lol has been confirmed as a brand impersonation site targeting Revolut, a financial technology company. Analysis indicates this infrastructure was designed to deceive users into engaging with fraudulent cryptocurrency airdrop promotions, a tactic commonly associated with credential theft or wallet-draining schemes. The domain is currently offline, though prior activity suggests it may have been operational during its brief existence. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Eranet International Limited, a registrar frequently observed in malicious domain registrations. It resolved to the IP address 188.114.97.3, which has been linked to other low-reputation hosting environments. Security vendors flagged this domain on two distinct blocklists, including ScamSniffer and PhishDestroy, while VirusTotal reported detection by 2 of 95 security vendors. Additional reputation metrics, such as a Gridinsoft trust score of 0/100, further corroborate its malicious classification. The page title, 'copper inu Airdrop,' aligns with typical social engineering lures used to exploit users' interest in cryptocurrency rewards. Current status indicates the domain has been taken offline, though the underlying infrastructure may remain dormant for future reactivation. Organizations and individuals are advised to proactively block this domain at the network level and monitor for related indicators of compromise. Users who interacted with this site should assume potential exposure of sensitive credentials or wallet information and take immediate remediation steps, including password resets and transaction monitoring. Security teams are encouraged to correlate this domain with other known impersonation campaigns targeting financial services to identify broader attack patterns.