coinbase-login[.]blogspot[.]pe

The domain coinbase-login.blogspot.pe was identified as a brand impersonation threat specifically targeting Coinbase users. This phishing site was designed to mimic the legitimate Coinbase login page, as evidenced by its page title 'Coinbase Login', in an attempt to steal login credentials from unsuspecting visitors. The domain's sole purpose is to deceive users into entering their sensitive information, posing a significant risk to any Coinbase customer who may have visited it.

Technical analysis reveals that this domain is registered through MarkMonitor, Inc. and was flagged by 11 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. It resolves to the IP address 216.58.206.65 and appears on 1 security blocklist. The SSL certificate was issued by Google Trust Services, which may have given it a false sense of legitimacy to some users. Fortunately, the site has been taken offline, but its previous availability means that some users may have already interacted with it.

If you have visited coinbase-login.blogspot.pe and entered any login credentials or personal information, you should immediately change your Coinbase password and enable two-factor authentication if not already active. Monitor your Coinbase account for any unauthorized activity and contact Coinbase support for further assistance. Additionally, run a security scan on your device to check for any malware that may have been downloaded. Always verify the URL of any login page and avoid entering credentials on sites that are not the official domain.