cozyvillee[.]webs-con[.]xyz

The domain cozyvillee.webs-con.xyz is actively involved in an Airdrop Scam, impersonating legitimate cryptocurrency airdrop events. Despite its recent creation on June 4, 2026, it is already flagged by one vendor on VirusTotal and appears on PhishDestroy's blocklist. This domain uses cloaking techniques, serving benign content to scanners with a low cloaking score of 2/10.

Hosted on IP 172.67.157.54 by Cloudflare, Inc., cozyvillee.webs-con.xyz exploits the trust associated with Google Trust Services SSL certificates. The platform risk score of 91/100 indicates a high likelihood of malicious activity. The domain's registrar, OwnRegistrar, Inc., is known for hosting similar scam operations, adding to the threat's credibility.

Phishing domains like cozyvillee.webs-con.xyz often exploit the time gap between domain registration and antivirus database updates. PhishDestroy's advanced detection pipeline identifies threats during this critical pre-detection window, ensuring early intervention. The presence of this domain on a public blocklist underscores its malicious intent, despite the low VirusTotal detection rate.

This domain's active status and its use of sophisticated evasion tactics highlight the ongoing risk it poses to potential victims. By masquerading as a legitimate airdrop event, it aims to deceive users into divulging sensitive information or transferring cryptocurrency. The combination of a high platform risk score and strategic cloaking techniques makes cozyvillee.webs-con.xyz a significant threat in the digital landscape.