airdropcoti[.]live

This domain, airdropcoti.live, is flagged as a brand impersonation threat designed to deceive users into participating in a fraudulent cryptocurrency airdrop. Analysis indicates the domain specifically targets Base network users, leveraging the COTI token brand to enhance credibility. The presence of an airdrop-themed phishing kit suggests intent to harvest wallet credentials or distribute malicious smart contracts under the guise of token distribution. Infrastructure analysis reveals the domain resolves to IP address 172.67.199.121 and was registered through Web Commerce Communications Limited. Security vendor detections on VirusTotal stand at 4/95, indicating moderate but inconsistent identification across platforms. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, reflecting high confidence in its malicious nature. Technologies detected include Cloudflare and HTTP/3, which may obscure origin infrastructure and complicate takedown efforts. The domain is currently offline, having been blocked by at least one security provider. However, residual risk remains due to potential re-registration or migration to new infrastructure. Users who interacted with this domain should immediately revoke any connected wallet permissions, monitor for unauthorized transactions, and verify smart contract interactions using blockchain explorers. Continued vigilance is advised, as similar domains may emerge using comparable impersonation tactics.