airdropvariational[.]live

This domain, airdropvariational.live, is flagged as a brand impersonation threat targeting Base, a cryptocurrency platform. Analysis indicates the deployment of an airdrop-themed phishing kit designed to deceive users into connecting wallets or submitting credentials under the guise of a token distribution event. The page title, "Variational Airdrop: Claim Your Tokens," reinforces the fraudulent claim, leveraging urgency and perceived opportunity to manipulate victims. Infrastructure analysis reveals the domain resolves to IP address 172.67.146.56, utilizing Cloudflare for hosting and traffic obfuscation. It is registered through Web Commerce Communications Limited and has been detected by 5 out of 95 security vendors on VirusTotal. The domain appears on three independent security blocklists and is actively blocked by wallet security tools and browser-based phishing filters. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. No legitimate association with Base or its official airdrop programs has been identified. As of the latest verification, airdropvariational.live has been taken offline, likely in response to detection and reporting. However, residual risk persists due to potential redeployment under new domains or infrastructure. Users are advised to verify all airdrop claims through official channels and avoid interacting with unsolicited token distribution links. Wallet connections to untrusted sites should be audited for unauthorized transactions, and security tools should be updated to include this domain in blocklists.