airdrop[.]cymru

The domain airdrop.cymru was a cryptocurrency phishing site operating as a crypto drainer, designed to steal digital assets by tricking users into connecting their wallets. Unlike typical airdrop scams impersonating known brands, airdrop.cymru did not mimic any specific project or service. The site is currently taken offline, but its previous activity posed a direct risk of unauthorized token transfers and fund theft.

Technical analysis of airdrop.cymru revealed minimal detection at the time of investigation, with 0 of 95 VirusTotal vendors flagging the domain. It resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The domain appeared on 1 security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0/100. No SSL certificate was present, and the page title displayed as 'airdrop.cymru'. Nameservers were ns1.dyna-ns.net and ns2.dyna-ns.net. Registrar and creation date details were not available.

Users who interacted with airdrop.cymru should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime units to aid in broader mitigation efforts.