xn--ethr-dpa[.]fr

PhishDestroy has identified xn--ethr-dpa.fr as a high-risk crypto drainer phishing site, now confirmed as an active threat before being taken offline. This domain was specifically designed to trick users into connecting their cryptocurrency wallets, leading to the theft of digital assets through deceptive smart contract approvals.

Intelligence gathered shows the domain was registered through Dynadot LLC on February 21, 2026, and appeared on one security blocklist. VirusTotal analysis reveals 1 out of 95 security vendors flagged the domain as malicious. The domain is now offline, but users who previously interacted with it should take immediate action.

To protect against crypto drainer threats, users should never connect their wallets to unknown sites, always verify URLs carefully, and revoke any token approvals given to suspicious contracts. Using a hardware wallet and enabling two-factor authentication adds an extra layer of security. If funds were lost, contact your wallet provider and report the incident to relevant authorities.