coinbase-pro-sign-ins[.]blogspot[.]co[.]ke

This domain, coinbase‑pro‑sign‑ins.blogspot.co.ke, was registered on 21 Feb 2026 through Afriregister Limited and resolves to 172.217.18.1, an address owned by AS15169 Google LLC in the United States. The site is hosted on Blogger infrastructure, uses Java, Python, OpenGSE and HTTP/3, and presents a 302 redirect with the page title “Blog not found”. The SSL certificate is issued by Google Trust Services (WE2). The domain is actively impersonating the Coinbase brand and is classified as a crypto‑scam. It is listed on three security blocklists and is flagged by Google Safe Browsing for social engineering. VirusTotal scans show 18 of 93 scanners flagging the domain as malicious. Current indicators suggest the site is still online and serving malicious content. Defenders should block DNS resolution to the domain, monitor outbound connections to its IP address, and add the domain to web filtering rules. Incident response teams should treat any credential or cryptocurrency transaction requests originating from this domain as fraudulent and advise users to verify legitimate Coinbase communications through official channels.