A new one, Google Sites says it was updated today:
Google sites feeder page: https://sites.google.com/view/coinbasedesk/blog/coinbase-not-working
Redirecting intermediate site: https://grawableaugespare.com/b5262782-6f2d-4b8d-be9b-62a16c70f015
Azure sites phishing site: https://coiasbwalog.azurewebsites.net/
Fake error page: https://coiasbwalog.azurewebsites.net/error.html
Tawk.to chat widget: https://tawk.to/chat/65ce2bd39131ed19d96d22a9/1hmmlmcl5
(The same Tawk.to account as was used on a previous Azure sites fake Coinbase, reported here: Tracking bank/crypto phishing gang(s) using Google Sites, Tawk.to, MS Azure sites, Wordpress, etc - #42 by ElmerFudde2020 )
Another new one today:
Download Phantom Wallet Extension | Official Website links to
https://gtly.to/rC9CVhwki which redirects to
https://phasnr.online/logg/ with the private key phishing page
Domain registered to a “ram gupta” of Uttar Pradesh.
Update: has a tawk.to chat associated, https://tawk.to/chat/65c0bebf0ff6374032c97558/1hlsei7jn
Google site SaitaPro - Ethereum | Polygon | Solana - Official Website links to
https://gtly.to/EznniXE_9 which redirects to
https://ssaitmsk.online/log/ with fake error page
https://ssaitmsk.online/err/ , with tawk.to chat widget
https://tawk.to/chat/65c0bdc80ff6374032c9751b/1hlseam9r .
Paul is waiting to chat with you. This domain is also registered to “ram gupta”