fc-bayern-fan-airdrop-2025[.]pages[.]dev

This domain, fc-bayern-fan-airdrop-2025.pages.dev, is currently flagged as a high-risk brand impersonation threat. Analysis confirms it targets Coinbase, a cryptocurrency exchange platform, by mimicking legitimate promotional or airdrop campaigns. The domain remains active and poses a significant risk to users who may be deceived into disclosing sensitive credentials or financial information under the guise of a trusted brand. Infrastructure analysis reveals the domain was registered on September 07, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious domains leveraging Cloudflare's infrastructure. Detection metrics indicate that 2 of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and is currently blocked by at least one threat intelligence feed. The page title, 'FC Bayern News - Latest news about FC Bayern Munich,' is designed to mislead users into believing the site is related to the football club, further obscuring its true intent. Current status confirms the domain remains active, with no evidence of takedown or mitigation at the time of this report. Users and organizations are advised to block the domain at the network level and update endpoint protection rules to prevent access. Security teams should monitor for any attempts to visit or interact with this domain, as it may indicate compromised credentials or ongoing phishing campaigns. If encountered, users should report the domain to their security providers and avoid entering any personal or financial information. Proactive measures, such as domain reputation checks and real-time threat intelligence integration, are recommended to mitigate similar threats.