coinbase-login-access[.]blogspot[.]sk

The domain coinbase-login-access.blogspot.sk is currently active and is flagged for brand impersonation of Coinbase. Created on March 07, 2026, the domain resolves to the IP address 216.58.206.65 and has been identified by 11 out of 95 security vendors on VirusTotal, indicating a high risk level. The domain appears on three security blocklists and is registered through MarkMonitor, Inc. Analysis reveals that the domain uses technologies such as Blogger, Java, Python, OpenGSE, and HTTP/3, with a SSL certificate provided by Google Trust Services. Despite the SSL certificate, the presence of the domain on multiple blocklists and the high number of flags from security vendors suggest that it is being used for malicious purposes, likely to deceive users into divulging sensitive information under the guise of a legitimate Coinbase login page. The page title 'Blog not found' may be an attempt to hide the true nature of the site or could indicate ongoing development or changes to the phishing infrastructure. Defenders should actively block this domain and monitor for any related activity. Additionally, users should be educated to verify the URL and SSL certificate of any Coinbase-related pages they visit, and to report any suspicious activity immediately.