coinbase-login[.]blogspot[.]com
“Coinbase Login”
证据摘要
The domain coinbase-login.blogspot.com is a confirmed phishing site engaged in brand impersonation targeting Coinbase users. It presents a fraudulent login page designed to harvest cryptocurrency account credentials through social engineering, classified as a high-risk scam. No drainer kit was detected, and the site is currently taken offline.
Technical analysis shows coinbase-login.blogspot.com was flagged by 16 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. Google Safe Browsing marked it for 'SOCIAL_ENGINEERING' phishing, and it appears on one security blocklist (PhishDestroy). The domain, registered through MarkMonitor, Inc. on July 31, 2000, resolves to the IPv6 address 2a00:1450:4001:80f::2001, hosted on Google LLC infrastructure in Germany. The SSL certificate is issued by Google Trust Services (WE2), and the observed page title was 'Coinbase Login'. Nameservers are ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com. Technologies detected include Blogger, Java, Python, OpenGSE, Clipboard.js, and HTTP/3.
Users who interacted with coinbase-login.blogspot.com should immediately change their Coinbase passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious transactions or unauthorized activity. Report the phishing domain to Coinbase’s security team via their official abuse reporting channels and submit it to Google Safe Browsing, PhishTank, or other threat intelligence platforms to aid in takedown efforts.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of coinbase-login.blogspot.com · checked Mar 2, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控