# airdrop.defiapp.cfd — MALICIOUS

> Warning: airdrop.defiapp.cfd is a crypto drainer impersonating Defi App. Avoid interacting with this domain to protect your assets and credentials.

## Summary
PhishDestroy identifies airdrop.defiapp.cfd as a crypto drainer targeting users of decentralized finance platforms. This domain poses a medium risk by attempting to steal cryptocurrency through deceptive means.

The phishing method involves impersonating a legitimate DeFi app, tricking users into connecting their wallets or entering private keys, which then allows attackers to drain their crypto assets. The domain has been taken offline but was flagged on multiple blocklists and detected by several security vendors.

If you visited airdrop.defiapp.cfd, immediately disconnect any wallets linked during the visit and monitor your accounts for suspicious activity. Change passwords and enable two-factor authentication on your crypto services to enhance security.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Defi App

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Web Commerce Communications Limited
- Country: MY
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: none

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Fortinet", "Seclookup", "SOCRadar", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "ScamSniffer", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c02f4-dbbe-706f-a007-9ca36233d54b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/cb80162e-3838-4f54-9941-d484596d873a
- PhishDestroy: https://phishdestroy.io/domain/airdrop.defiapp.cfd/
- LLM endpoint: https://phishdestroy.io/domain/airdrop.defiapp.cfd/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop.defiapp.cfd/
Last updated: 2026-03-19