new-coinbasse-auth[.]framer[.]ai

This site, registered as new-coinbasse-auth.framer.ai, is a cryptocurrency scam that impersonates the Coinbase brand. Its page title claims to be "Official Site | Coinbase Pro | Digital Asset Exchang*", indicating it is designed to trick users into believing it is a legitimate Coinbase Pro login or authentication page. The threat is credential theft and potential cryptocurrency theft from victims who attempt to access their accounts through this fraudulent portal.

Technical analysis confirms the malicious nature of this site. VirusTotal reports 9 out of 95 vendors flagging the domain as malicious. It is flagged by security vendors ChainPatrol, alphaMountain.ai, CRDF, CyRadar, and ESET, and appears on one blocklist. The domain was created on 2018-01-06 and is hosted on IP address 52.223.52.2, which is assigned to AS16509 Amazon.com, Inc. in the United States. The registrar is CSC Corporate Domains, Inc., and the site uses an SSL certificate issued by Let's Encrypt with fingerprint E8. Nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

The site is currently DOWN/OFFLINE, indicating it may be inactive or temporarily disabled. The risk level is high due to the confirmed impersonation of a major cryptocurrency brand and the site's specific targeting of authentication credentials. Users should be warned that any previous interaction with this domain may have exposed sensitive login information.