events-coinbase[.]fun

Analysis indicates events-coinbase.fun is a brand impersonation domain designed to mimic Coinbase and promote a fraudulent “Coinbase Coin | Airdrop” page. The content is structured to mislead users into believing they are participating in an official cryptocurrency distribution event, typically used to harvest wallet credentials or trigger malicious approvals.

Technical indicators show 18/95 VirusTotal vendors classify the domain as malicious. The domain was created on February 21, 2026, and is associated with registrar infrastructure not aligned with legitimate Coinbase operations. It resolves to IP 172.67.149.44 under AS13335 Cloudflare, Inc., and uses SSL certificate WE1. The domain is additionally confirmed on 3 security blocklists and is currently taken offline.

If a user interacted with this domain, it is recommended to immediately disconnect any connected wallet sessions, revoke token approvals, and transfer assets to a newly secured wallet if compromise is suspected. Passwords reused across cryptocurrency or email services should be changed without delay. Security scans of devices used for interaction should be performed to rule out malware or browser-based credential theft. All related transactions should be monitored for unauthorized activity, and incident reports should be submitted to relevant security providers.