bdn-vip[.]pages[.]dev

This domain, bdn-vip.pages.dev, is flagged as an active phishing threat targeting users with a fraudulent airdrop scheme. Analysis indicates the site presents itself under the title 'Jeo Boden | Official Airdrop,' suggesting an attempt to deceive visitors into engaging with a cryptocurrency or token distribution scam. Infrastructure analysis reveals the domain is hosted on Cloudflare infrastructure, resolving to the IP address 172.66.47.130, and was registered on March 26, 2026. The SSL certificate is issued by Google Trust Services, and the site employs common web technologies such as Bootstrap, jQuery, and Slick, alongside Cloudflare’s security and performance features, including HSTS and HTTP/3. Security vendor detection is limited, with only one of 95 vendors on VirusTotal flagging the domain as malicious. The domain appears on a single security blocklist and is classified as an airdrop scam by at least one threat intelligence source. While the domain’s registration age and Cloudflare hosting are not inherently suspicious, the combination of a low trust score (0/100), the specific phishing kit classification, and the deceptive page title provides concrete evidence of malicious intent. Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. Further investigation into associated infrastructure, such as linked wallets or redirect chains, is recommended to identify broader campaign activity.