register-44[.]fun

PhishDestroy identifies www.register-44.fun as an active brand impersonation scam targeting Airdrop promotions. The domain leverages a fraudulent page titled 'Dude 44 | Airdrop' to deceive users into submitting credentials or cryptocurrency payments under the guise of a legitimate airdrop campaign. No drainer kit signatures were observed during initial analysis, but the page structure suggests a typical crypto-draining operation.

This domain was flagged with a VirusTotal detection score of 2/95 as of the latest scan, indicating it remains unflagged by antivirus engines. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 06, 2026, and resolves to IP 188.114.96.3. The domain holds a valid Let's Encrypt SSL certificate, which may be used to lend false legitimacy to the scam. As of this report, the domain has not been blocklisted by Google Safe Browsing (GSB) and has zero entries in threat intelligence feeds.

The campaign is currently active and poses a high risk to cryptocurrency users seeking free token distributions. No remediation actions have been publicly recorded, and the domain remains accessible. Users are advised to avoid interacting with this domain and report it to relevant authorities. The absence of detections suggests this scam is either newly launched or employs evasion techniques. Remaining risk is high due to the active status and lack of detection coverage.