logn-coinbse[.]grapedrop[.]net

The domain logn-coinbse.grapedrop.net is identified as a high-risk brand impersonation domain actively targeting Coinbase. The domain is currently active and has been flagged for impersonating Coinbase, a well-known cryptocurrency exchange platform.

Analysis indicates that logn-coinbse.grapedrop.net is flagged by 12 of 95 VirusTotal vendors, highlighting the domain's association with malicious activities. The domain is registered through NameCheap, Inc., and resolves to the IP address 188.114.96.3, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The domain was created on December 04, 2020, and currently appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Additionally, the domain is flagged by Google Safe Browsing for phishing. The SSL certificate for the domain is issued by Google Trust Services / WE1, which might be used to gain user trust and reduce suspicion.

Given the high risk level and active status of logn-coinbse.grapedrop.net, it is strongly recommended that users avoid accessing this domain. Security teams should implement immediate blocking measures to prevent access to this domain from corporate networks and devices. Organizations should also educate their employees about the signs of brand impersonation and phishing attacks, especially those targeting well-known brands like Coinbase. Regular monitoring of domain reputation and IP addresses is essential to detect and mitigate such threats promptly.