# coinbase-help.blogspot.be — MALICIOUS

> coinbase-help.blogspot.be was flagged for brand impersonation targeting Coinbase. Now offline after being detected for social engineering.

## Summary
PhishDestroy identifies coinbase-help.blogspot.be as a high-risk phishing domain impersonating the Coinbase brand to deceive users. The domain aimed to mislead victims with fraudulent content mimicking official services.

This malicious site resolved to IP 142.250.201.161 and was registered via MarkMonitor, Inc. since February 21, 2026. It appeared on two security blocklists and was flagged by Google Safe Browsing for social engineering. VirusTotal detected 13 out of 95 security vendors labeling it as suspicious.

Currently, the domain is offline, reducing immediate threat exposure. Users are advised to remain cautious of similar URLs and rely solely on verified Coinbase channels. Continuous monitoring of such impersonation attempts is recommended to prevent credential theft and fraud.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Target brand: Coinbase
- Page title: Blog not found

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: MarkMonitor, Inc.
- Country: US
- IP: 142.250.201.161
- IP Country: US
- IP City: Mountain View
- IP Org: AS15169 Google LLC
- Nameservers: ["ns3.google.com", "ns1.google.com", "ns2.google.com", "ns4.google.com"]
- SSL Issuer: Google Trust Services / WE2

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "ESET", "Emsisoft", "Fortinet", "Google Safebrowsing", "Lionic", "Netcraft", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c3b12-471c-74b9-9ebe-443c40a023e9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fe22c772-4b00-4a66-85bf-72421fe2c324
- PhishDestroy: https://phishdestroy.io/domain/coinbase-help.blogspot.be/
- LLM endpoint: https://phishdestroy.io/domain/coinbase-help.blogspot.be/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase-help.blogspot.be/
Last updated: 2026-03-19