login-coin[.]blogspot[.]jp

As of July 23, 2026, the domain login-coin.blogspot.jp is flagged for brand impersonation, specifically targeting Coinbase. The domain was created on February 21, 2026, and is currently active. The page title 'coinbase login - my coinbase account' strongly suggests that the site is designed to mimic Coinbase's login page, potentially to trick users into divulging sensitive information. Analysis indicates that the domain is being used for a crypto scam, as it impersonates a well-known cryptocurrency exchange. The HTTP status code 302 suggests that the domain is redirecting users to another location, which could be part of the phishing mechanism.

Google Safe Browsing has flagged the domain for social engineering, indicating a high risk of user deception. The domain is blocked by PhishDestroy, MetaMask, and SEAL, which are known security tools and blocklists. The SSL certificate is issued by Google Trust Services / WE2, which might lend a false sense of security to unsuspecting users. The domain resolves to the IP address 172.217.18.1, which is located in the United States and is associated with Google LLC (AS15169). The site is detected to use Blogger, Java, Python, OpenGSE, and Google AdSense, along with HTTP/3.

Gridinsoft's trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. The domain appears on three security blocklists, further confirming its malicious nature. Defenders should immediately block this domain and warn users about the risk of visiting it. Additional monitoring and analysis of the redirected location are recommended to understand the full scope of the threat.