copi-airdrop[.]pages[.]dev

The domain copi-airdrop.pages.dev is assessed as a high-risk threat, categorized under brand impersonation. This domain impersonates an Airdrop Scam, posing a significant risk to users who may be misled into providing sensitive information or financial assets.

Analysis indicates that copi-airdrop.pages.dev has been flagged by 7 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain was created on May 24, 2025, and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.44.161, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain appears on one security blocklist, specifically PhishDestroy, and has an SSL certificate identified as WE1. These technical indicators, combined with the high number of security vendors flagging the domain, suggest a deliberate and sophisticated attempt to impersonate a legitimate airdrop service.

To mitigate the risks associated with this brand impersonation threat, users are advised to avoid interacting with the domain copi-airdrop.pages.dev. Organizations should update their security policies to block access to this domain and educate employees about the signs of airdrop scams. Additionally, network administrators can configure DNS settings to prevent resolution to the IP address 172.66.44.161. Regularly monitoring security blocklists and incorporating real-time threat intelligence can help in identifying and blocking similar domains in the future.