Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is network-abuse@google.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
coinbase-login[.]blogspot[.]lt
“Coinbase Login”
coinbase-login.blogspot.lt — Não verificado. Representação da marca: Coinbase; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 15/91 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLScan malicious verdict; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. Registrador: Google Blogger.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis confirms that coinbase-login.blogspot.lt is an active brand‑impersonation infrastructure targeting Coinbase users. The domain, registered on 07 Dec 2018, resolves to IP 142.251.179.132, which is hosted in Germany and belongs to AS15169 (Google LLC). The site presents a HTTP 302 redirect and serves a TLS certificate issued by Google Trust Services (WE2). Content is built on the Blogger platform and incorporates Java, Python, OpenGSE, Clipboard.js, and HTTP/3, indicating a mixed‑technology payload. Google Safe Browsing flags the URL for social engineering, and eight of ninety‑one VirusTotal scanners have identified it as malicious. The domain appears on three external blocklists and has been blocked by multiple threat‑remediation services. Nameserver data is unavailable. Defenders should add the domain to inbound/outbound filtering rules, monitor for DNS queries to the associated IP, and ensure that any credential‑capture attempts are logged and investigated. Continuous re‑evaluation is advised, as the site remains active and could evolve its delivery mechanisms.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 6 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com 100% de confiançaJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100% de confiançaOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of coinbase-login.blogspot.lt · checked Jul 1, 2026
Análise da configuração do site
Evidências e relatórios externos
PD-20260701-8A831C Recipient: network-abuse@google.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo