app-aawe-gho[.]eu[.]com

This domain is flagged as a high-risk generic phishing domain with a specific scam type of Crypto Drainer. The domain was created on February 21, 2026, and remains active as of the report date. It is hosted on Cloudflare infrastructure (AS13335, US-based IP 188.114.97.3) and uses HTTP/3. The SSL certificate is issued by Google Trust Services. The domain is registered through Instra Corporation Pty Ltd and uses nameservers operated by Centralnic. The page title indicates a 522 connection timeout error, suggesting the server may be misconfigured or intentionally inaccessible at the time of analysis. VirusTotal shows 3 out of 93 security vendors flagging this domain, and it appears on one security blocklist. PhishDestroy has blocked the domain. The Gridinsoft trust score is 0 out of 100, indicating strong community distrust. The exact content of the site has not been analyzed; however, the Crypto Drainer classification points to a scheme designed to steal cryptocurrency wallet credentials or assets. Defenders should block access to this domain, monitor for related infrastructure, and educate users about crypto wallet phishing risks. Further investigation into the domain's behavior and payloads is recommended.