coinbase-login[.]blogspot[.]hk

This domain, coinbase-login.blogspot.hk, is currently flagged as a high-risk brand impersonation threat targeting the cryptocurrency exchange platform Coinbase. The domain has been active since its creation on November 27, 2010, and is still operational as of July 12, 2026. Infrastructure analysis reveals that the domain resolves to the IP address 142.250.185.129, which is associated with Google's infrastructure, and is registered through MarkMonitor, Inc. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. Despite this, the domain is flagged by 10 out of 95 security vendors on VirusTotal, indicating a significant level of concern among security professionals. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trustworthiness. Furthermore, the domain appears on one known security blocklist and is blocked by the PhishDestroy system, further corroborating its malicious nature. The exact content of the page has not yet been analyzed, but the page title 'Coinbase Login' suggests that it may be designed to deceive users into entering their credentials, potentially leading to account compromise. Defenders should be vigilant and monitor for any attempts to redirect users to this domain or similar impersonation sites. Immediate action should include updating security policies to block access to this domain and educating users about the risks of brand impersonation attacks. Additionally, regular monitoring and reporting of any related activity can help in mitigating the potential damage from this threat.