support-coinbase-ex-en[.]framer[.]ai

This domain, support-coinbase-ex-en.framer.ai, is a fraudulent cryptocurrency-themed website designed to impersonate the Coinbase brand. The page title "My Framer Site" indicates the site is a default or placeholder page, suggesting it was set up quickly for malicious purposes. The threat posed is credential theft or cryptocurrency asset compromise, as users may be tricked into providing login details or private keys under the guise of a legitimate Coinbase support portal.

Technical analysis shows the site is flagged by 8 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, and Fortinet. It is listed on 1 blocklist. The domain was registered on 2018-01-06 through CSC Corporate Domains, Inc. The IP address 52.223.52.2 is hosted in the United States under AS16509 Amazon.com, Inc. The SSL certificate is issued by Let's Encrypt (serial E8), and nameservers include ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

The site is currently offline and inaccessible, reducing immediate risk. However, given its impersonation of Coinbase and multiple security vendor flags, the overall risk level is high. Users who may have interacted with this domain while it was active should assume their credentials are compromised and take appropriate action.