airdrop-ebg[.]pages[.]dev

This domain, airdrop-ebg.pages.dev, is a crypto drainer designed to trick users into connecting their cryptocurrency wallets, after which it drains their funds. It poses as a legitimate airdrop platform but is entirely malicious. The site is still active and has not yet been widely flagged by security vendors.

PhishDestroy has identified this threat through multiple technical indicators. The domain was registered via Cloudflare Pages and uses a Let's Encrypt SSL certificate (YE2). It resolves to IP 172.66.44.209. VirusTotal reports 0 out of 95 security vendors detecting it as malicious, meaning it has not yet been added to blocklists. However, the activity pattern matches known crypto drainer tactics.

If you have visited this site or connected your wallet, take immediate action: revoke any permissions granted to the site through your wallet settings, transfer remaining funds to a new wallet that has never interacted with this domain, and monitor your accounts for suspicious transactions. Use a hardware wallet for future interactions and always verify airdrop URLs through official channels. Report the domain to your blockchain's security team and to services like PhishDestroy to help protect others.