eul[.]airdrpsalert[.]life

The domain eul.airdrpsalert.life is currently flagged as a credential phishing site. Analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc. and is geolocated in the United States. The domain was registered through Cloudflare, Inc., and no SSL certificate is present, resulting in an unsecured HTTP service that presently returns a 502 Bad gateway response, as reflected in the page title "airdrpsalert.life | 502: Bad gateway." The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service.

VirusTotal scans indicate that 11 of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. Gridinsoft assigns the domain a trust score of 0 out of 100, the lowest possible rating, which aligns with other indicators of compromise. Intelligence attributes the observed activity to an "Airdrop Scam" phishing kit, and the overall scam type is classified as credential phishing, suggesting attempts to harvest user credentials.

Defenders should incorporate the domain and its associated IP address into blocklists, enforce network‑level deny rules, and monitor for any residual traffic to the IP range owned by Cloudflare. Continuous re‑evaluation is advised, as the domain status may change if the operators reactivate the site.