Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
login-coin[.]blogspot[.]de
“coinbase login - my coinbase account”
Resumen de las pruebas
The domain login-coin.blogspot.de presented a page titled "coinbase login - my coinbase account" and impersonated the cryptocurrency brand Coinbase. This site posed a threat by attempting to harvest user credentials for Coinbase accounts through a fraudulent login interface, targeting cryptocurrency users for account compromise and theft of digital assets.
Technical evidence from the provided data shows the site was flagged by 13 out of 95 VirusTotal vendors. Google Safe Browsing flagged it for SOCIAL_ENGINEERING. The domain was registered with Google LLC, created on 2026-02-21, and hosted at IP 172.217.16.161, assigned to AS15169 Google LLC in the United States. It used an SSL certificate from Google Trust Services / WE2. The nameservers were ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com. Blocklists recorded three entries, and GridinSoft trust rating was 0/100.
The site is currently reported as DOWN/OFFLINE. The risk level is high due to the combination of brand impersonation, multiple security vendor detections, social engineering flagging, and a zero trust score, indicating it was a confirmed phishing threat targeting cryptocurrency users.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260210-4AB414- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Section 3.1 of the AUP: The domain login-coin.blogspot.de is actively engaging in phishing activities, attempting to deceive users into providing sensitive information such as usernames and passwords.
Section 4.2 of the TOS: The registrar reserves the right to suspend or terminate services for any fraudulent or deceptive practices. The operation of this domain constitutes a clear violation of this provision.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the fraudulent use of information obtained from such access.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, which is applicable given the phishing nature of this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading headers and deceptive subject lines, which are relevant to the phishing tactics employed by this domain.
Regulatory Note: Failure to take immediate action against this domain may result in liability under applicable laws and could expose your organization to regulatory scrutiny. It is imperative to act swiftly to mitigate potential legal repercussions.
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
8 fuentes externas supervisadas Sin coincidencias
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of login-coin.blogspot.de · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.