coinbase-event[.]fun

This domain, coinbase-event.fun, poses a high-risk threat as a fraudulent crypto airdrop platform impersonating Coinbase. The site lures victims with promises of free cryptocurrency distributions, a common tactic to harvest wallet credentials or deploy malicious smart contracts. Users who interact with the site risk unauthorized access to their digital assets, financial loss, or exposure of sensitive account information. The fraudulent nature is reinforced by the site's design, which mimics legitimate Coinbase branding to deceive targets into believing the offer is authentic. Analysis indicates this domain was registered on February 21, 2026, and is hosted on Cloudflare infrastructure at IP address 104.21.76.121. It has been flagged by 19 out of 95 security vendors on VirusTotal, confirming its malicious classification. The domain appears on three security blocklists and uses a WE1 SSL certificate, a low-assurance certificate often associated with short-lived phishing campaigns. The page title, 'Coinbase Coin | Airdrop,' directly references Coinbase branding, further solidifying its intent to impersonate the legitimate exchange. If you visited coinbase-event.fun or interacted with its content, immediate action is required. Disconnect any connected wallets or devices from the internet to prevent ongoing malicious activity. Review all recent transactions for unauthorized transfers and revoke any suspicious smart contract approvals. Change passwords for associated accounts, enable multi-factor authentication, and monitor financial statements for unusual activity. Report the incident to relevant security teams and consider freezing compromised assets if theft is suspected. Users should also scan their devices for malware, as phishing sites may deliver secondary payloads.