coinpro-login[.]framer[.]media

The domain coinpro-login.framer.media has been identified as a brand impersonation threat, specifically targeting Coinbase users with a fake login page titled "Coinbase Pro Login – A Complete Guide to Secure Access and Trading." This domain is currently offline, but its history and technical indicators suggest it was designed to harvest credentials from unsuspecting visitors.

Technical analysis reveals that the domain was created on November 19, 2021, and registered through CSC Corporate Domains, Inc. It resolves to IP address 35.71.142.77 and uses a Let's Encrypt SSL certificate (E7). VirusTotal reports that 3 out of 95 security vendors flagged this domain as malicious, and it appears on 3 security blocklists. These indicators, combined with the clear attempt to impersonate Coinbase, place this domain at an elevated risk level.

As of the latest check, the domain has been taken offline, which is a positive development. However, users should remain vigilant and verify any communications claiming to be from Coinbase. PhishDestroy recommends that anyone who may have interacted with this domain change their Coinbase credentials immediately and enable two-factor authentication. Always access Coinbase directly by typing the official URL into your browser, and never click on links from unsolicited emails or messages.