coinbase-login[.]blogspot[.]cl

This report analyzes a domain that impersonates the legitimate Coinbase brand. The page title "Coinbase Login" indicates the site was designed to mimic the official Coinbase authentication page, posing a threat as a cryptocurrency phishing scam intended to steal user credentials and potentially access digital wallets.

Technical evidence from the available data shows that 10 out of 95 VirusTotal vendors flagged this domain as malicious, with detections from alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. The domain was registered on 2012-01-31 through MarkMonitor, Inc. and hosted on IP address 2a00:1450:4001:813::2001 (Germany) belonging to AS15169 Google LLC. SSL certification is provided by Google Trust Services / WE2, and nameservers are ns1.google.com through ns4.google.com.

The domain is currently offline and has a DOM risk score of 10 out of 100, with a GridinSoft trust rating of 0 out of 100. It is listed on 1 blocklist. The risk level is high due to the combination of brand impersonation, cryptocurrency scam type, and multiple security vendor flags, though the site being offline reduces immediate threat.