cbotq0[.]com

This domain, cbotq0.com, is identified as a high-risk crypto drainer phishing site designed to compromise digital wallet credentials and drain cryptocurrency assets. Analysis indicates no direct brand impersonation, but the infrastructure aligns with known drainer kits used to execute unauthorized transactions. The site employs deceptive prompts to trick users into connecting wallets, a common tactic in cryptocurrency theft campaigns. Infrastructure analysis reveals the domain was registered on April 17, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.8.5, hosted by a content delivery network in Canada, which is a common obfuscation technique. Google Safe Browsing explicitly flags the domain as phishing, and it appears on three security blocklists. VirusTotal reports 14 out of 95 security vendors detecting the domain as malicious, confirming its classification as a phishing threat. The domain is currently offline, likely due to takedown actions by security providers or hosting infrastructure. However, the associated registrar and IP history suggest the threat actors may re-deploy the campaign under a new domain. Users who interacted with this site should immediately revoke wallet permissions, monitor transaction histories for unauthorized activity, and consider migrating assets to a new wallet. The remaining risk includes potential follow-up attacks targeting compromised credentials or reuse of the same infrastructure for future phishing attempts.