coinbasego[.]blogspot[.]com

PhishDestroy identifies coinbasego.blogspot.com as an active Coinbase brand impersonation site designed to steal cryptocurrency. This fraudulent page mimics the legitimate Coinbase login interface to trick users into entering their credentials, which are then harvested by attackers to drain connected wallets. The domain uses a Google Trust Services SSL certificate to appear legitimate and resolves to IP 142.251.13.132, a Google-owned address that has no relationship with Coinbase’s infrastructure. With 10 out of 95 VirusTotal security vendors detecting malicious activity, this site presents an elevated risk to users who may accidentally expose their login details or wallet private keys. This domain was flagged on PhishDestroy’s database with creation details showing it registered through Blogger’s platform, leveraging Google’s free hosting service to rapidly deploy scam pages. The low barrier to entry on Blogger allows threat actors to create similar impersonation sites within minutes, rotating domains to evade blacklists. VirusTotal’s detection count of 10 vendors highlights partial coverage, meaning many antivirus tools and browser filters may not yet block this specific URL. The use of Google’s infrastructure complicates takedown efforts, as the scam page remains accessible until reported and manually reviewed by Google’s abuse team. If you visited coinbasego.blogspot.com or entered any information, immediately revoke access to your Coinbase account through the official app or website and enable two-factor authentication. Transfer any remaining funds to a secure wallet not linked to the compromised account. Scan your devices for malware using reputable antivirus software and change passwords for all related accounts, avoiding reuse across platforms. Report the domain to PhishDestroy and Coinbase’s fraud team to help protect other users. Always verify URLs by typing coinbase.com directly into your browser before logging in, and never click links from unsolicited emails or messages claiming to be from Coinbase.