coinbase-pro-sign-ins[.]blogspot[.]kr

The domain coinbase-pro-sign-ins.blogspot.kr was registered on 2026-02-21 and resolves to 142.251.141.97, an address owned by Google LLC (AS15169). It is hosted on the Blogger platform, utilizes Java, Python, OpenGSE, and supports HTTP/3. HTTPS is presented with a certificate issued by Google Trust Services under the WE2 brand. HTTP responses return a 302 redirect and the page title reports “Blog not found”. Google Safe Browsing flags the site for social engineering, and the domain appears on three independent blocklists (PhishDestroy, MetaMask, SEAL). VirusTotal scans show 13 of 93 security vendors label the domain as malicious. Name servers are ns1‑ns4.google.com, and registration was performed through Whois Corp. The site is classified as a crypto scam impersonating Coinbase. Current evidence confirms the domain remains active, but the exact phishing landing page content has not been captured. Defenders should block the domain at the network perimeter, add it to URL filtering rules, monitor DNS queries to the listed Google name servers, and treat any credential submissions to this domain as compromised. Additional analysis is required to detail the payload and any credential‑harvesting mechanisms.