coiinbase-logiin[.]blogspot[.]hu

PhishDestroy identifies this domain as a high-risk brand impersonation threat, specifically targeting Coinbase users. The domain mimics the legitimate Coinbase login page to steal credentials and cryptocurrency assets. Its risk level is elevated due to the sophisticated lookalike URL and active phishing indicators.

This domain was created on February 21, 2026, and registered through Google LLC. VirusTotal shows 15 out of 95 security vendors flagging it as malicious, and it appears on three security blocklists. Google Safe Browsing flags it as phishing. The domain resolves to IP address 142.251.37.1 and uses an SSL certificate from Google Trust Services (WE2). The page title was "How do I buy Bitcoin on Coinbase?" which is a common phishing lure. The domain is currently offline, but similar variants may emerge.

Users who encounter such domains should never enter credentials or personal information. Always verify the URL by manually typing the official Coinbase website (coinbase.com) into the browser. Enable two-factor authentication on all crypto accounts and report suspicious domains to Google Safe Browsing and Coinbase support. Use a password manager to auto-fill credentials only on known legitimate sites.