register-mania[.]fun

The domain register-mania.fun was registered on February 21, 2026 through Eranet International Limited and is hosted on Cloudflare infrastructure (IP 188.114.96.3, AS13335, United States). The domain resolves to a Cloudflare IP without an SSL certificate and uses the Cloudflare nameservers delilah.ns.cloudflare.com and lewis.ns.cloudflare.com. The site’s page title, "Memecoin Mania | Airdrop," and the identified phishing kit labeled "Airdrop Scam" indicate a crypto‑focused social engineering campaign that targets users of the Revolut brand.

VirusTotal analysis recorded a single positive detection out of 95 security vendors, and the domain appears on one external security blocklist. PhishDestroy has already blocked the site, and the Gridinsoft trust score is 0/100, reflecting a high confidence in malicious intent. The domain is currently offline, but the historical evidence suggests that attackers leveraged the brand name to lure victims into a fake airdrop offering, a common tactic in crypto scams.

Uncertainty remains regarding the exact payload delivered to victims, as the page content has not been publicly examined. Defenders should update their URL filtering and brand‑monitoring rules to include register-mania.fun as a known Revolut impersonation vector, enforce TLS inspection to detect the lack of SSL, and monitor Cloudflare‑hosted IP ranges for similar patterns. Incident response teams should also consider the single vendor detection as an indicator of compromise and correlate any related traffic with the identified IP and nameserver configuration to prevent future exploitation.