airdrop[.]eu[.]com

The domain airdrop.eu.com is an active cryptocurrency phishing site designed to function as a crypto drainer. Crypto drainers trick victims into connecting their wallets, then silently transfer funds to attacker-controlled addresses without consent. This site does not impersonate a specific brand but operates as a standalone scam targeting cryptocurrency users. As of the latest verification, airdrop.eu.com remains active and poses an elevated risk to visitors.

Technical indicators confirm the suspicious nature of airdrop.eu.com. The domain is flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Fortinet, and Gridinsoft. It appears on one security blocklist, PhishDestroy, though Google Safe Browsing has not yet flagged it. Registered through Instra Corporation Pty Ltd. on February 21, 2026, the domain resolves to the IP address 104.21.11.82, hosted on Cloudflare’s network (AS13335). The SSL certificate is issued by WE1, and the observed page title is 'Just a moment...'. MX records point to eu-com-wildcard-null-mx.centralnic.net, with nameservers under centralnic.net.

Users who interacted with airdrop.eu.com should immediately revoke any token approvals granted to the site using a tool like Etherscan’s token approval checker or Revoke.cash. Transfer remaining funds to a new, secure wallet to prevent further unauthorized transactions. Report the domain to platforms such as PhishTank, Google Safe Browsing, or local cybercrime authorities to aid in takedown efforts. Victims should also monitor their wallets for unusual activity and consider filing a report with law enforcement if significant losses occurred.