logincoinbasewallet[.]blogspot[.]com[.]ar

PhishDestroy has identified logincoinbasewallet.blogspot.com.ar as a brand impersonation attack targeting Coinbase users. This website likely hosts a fraudulent login page designed to steal usernames, passwords, and potentially cryptocurrency funds. Users who enter their credentials on this site risk having their Coinbase accounts compromised. The site's design mimics the legitimate Coinbase interface to deceive unsuspecting visitors into divulging sensitive information.

Technical indicators support this assessment. While VirusTotal currently shows a low detection rate of 17/95, Google Safe Browsing has flagged this domain for "SOCIAL_ENGINEERING", which suggests deceptive practices. The domain was created on October 29, 2013, and is registered through nicar. It resolves to the IP address 142.251.13.132, and uses an SSL certificate issued by Google Trust Services, which, while legitimate, does not guarantee the site's authenticity. Scammers often use valid SSL certificates to appear trustworthy.

If you have visited logincoinbasewallet.blogspot.com.ar and entered your Coinbase login credentials, immediately change your password on the official Coinbase website. Enable two-factor authentication for added security. Monitor your Coinbase account for any unauthorized transactions or suspicious activity. Report the incident to Coinbase support and consider reporting the phishing site to Google Safe Browsing and other relevant authorities. Be cautious of any emails or messages you receive after visiting the site, as they may be part of a follow-up phishing attempt. Always verify website URLs carefully before entering sensitive information, and double-check that you are on the legitimate Coinbase website before logging in.