logincoinbasewallet[.]blogspot[.]be

A fraudulent Coinbase wallet login page at logincoinbasewallet.blogspot.be is actively stealing credentials, warns PhishDestroy after cross-checking 11 VirusTotal engines, a Google Safe Browsing SOCIAL_ENGINEERING flag, and an SSL certificate issued by Google Trust Services. This high-risk impostor appeared in search results disguised as Coinbase’s official wallet login and resolves to IP 142.251.110.132. The domain was created on February 01, 2003 and is hosted on Blogger, making it unusually long-lived for phishing infrastructure. This domain operates under classic brand-impersonation tactics: a misspelling that evades typo-squatting filters and a Blogspot subdomain that looks legitimate at first glance. The 11 VirusTotal detections (out of 95 scanners) and Google’s SOCIAL_ENGINEERING classification confirm active phishing use. Despite its age, the page shows recent content updates pushing fake Coinbase wallet login forms designed to harvest email-password combinations and two-factor codes, which are immediately transmitted to attacker-controlled servers. If you visited logincoinbasewallet.blogspot.be, assume your credentials may be compromised. Do NOT reuse passwords on Coinbase or any other financial service. Revoke any session tokens linked to the exposed password and enable Coinbase’s enhanced security features like hardware-key authentication. Report the domain to Google Safe Browsing at safebrowsing.google.com/report_phish and delete any bookmarks pointing to this page. Always navigate directly to coinbase.com or use Coinbase’s official mobile app to access your wallet.