register-nyc[.]fun

This domain is flagged as an elevated-risk phishing infrastructure specifically designed to impersonate Revolut, a financial services provider, through a fraudulent NYC Token airdrop scheme. Analysis indicates the domain was crafted to deceive users into believing they are interacting with an official cryptocurrency distribution event, a common tactic in credential harvesting and financial fraud operations targeting digital banking customers. Infrastructure analysis reveals the domain register-nyc.fun was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with abusive registrations. It resolves to the IP address 188.114.97.3, which has been linked to other malicious activities. Security vendor assessments show 3 out of 95 engines on VirusTotal flag the domain as malicious, while AlienVault OTX lists it in one threat intelligence pulse. The domain appears on two security blocklists and is actively blocked by fraud detection systems. The Gridinsoft trust score for this domain is 0 out of 100, further confirming its malicious nature. The page title, NYC Token | Airdrop, directly aligns with the impersonation of Revolut’s branding, exploiting user interest in token distributions to facilitate fraud. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (188.114.97.3) at the network perimeter. Organizations should update security blocklists to include this domain and monitor for any attempts to re-register similar domains using permutations of the target brand name. End users should be educated on recognizing fake airdrop schemes, particularly those leveraging financial institution branding. Financial services providers should proactively monitor for domain registrations that mimic their brand and issue warnings to customers about ongoing impersonation campaigns. If the domain resurfaces, security teams should conduct a forensic analysis of its hosting infrastructure to identify additional indicators of compromise.