somnia[.]registers[.]ink

As of July 24, 2026, the domain somnia.registers.ink is flagged as a crypto scam impersonating an airdrop. The site was taken offline, but its creation on February 21, 2026, and its previous online status indicate a short-lived campaign typical of phishing operations. The domain resolves to the IP address 199.188.201.33, which is hosted in the United States under the ASN AS22612, associated with Namecheap, Inc. The SSL certificate used by the domain is issued by Sectigo Public Server Authentication CA DV R36, which is a common choice for quick and inexpensive certificate generation often seen in phishing campaigns. The domain's page title, 'Somnia Airdrop,' suggests that the phishing kit was designed to attract crypto enthusiasts looking for airdrop opportunities, a common tactic in crypto-related scams.

Gridinsoft's trust score for the domain is 0/100, indicating a high level of suspicion and potential threat. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, which further supports its classification as a phishing site. Given the elevated risk level and the specific targeting of crypto users, defenders should ensure that their network and user endpoints are configured to block access to this domain.

Defenders should also educate users about the risks of airdrop scams and verify the authenticity of any airdrop offers through official channels before engaging. While the domain is currently offline, it is advisable to monitor for any resurgence of activity. The exact content of the site has not been fully analyzed, but based on the provided evidence, it is clear that the domain was part of a targeted phishing campaign aimed at crypto users.