coin-base-exts-ension[.]framer[.]ai

The domain coin-base-exts-ension.framer.ai impersonates the legitimate cryptocurrency exchange, Coinbase, aiming to deceive users into providing sensitive credentials. With a VirusTotal score of 14 out of 95, this domain is flagged as a potential phishing threat. The threat is further underscored by its association with the cryptocurrency sector, making it particularly dangerous for those engaged in digital asset trading.

Registered with CSC Corporate Domains, Inc., this domain has been active for approximately 2971 days, indicating a long-standing presence in the phishing landscape. The IP address associated with this domain is 198.18.0.168, which has been noted for hosting multiple fraudulent sites. Additionally, it is currently blocklisted in three databases, reflecting the growing concern about its malicious intent.

As of now, the domain remains active and continues to function as a phishing vehicle. PhishDestroy has reported the domain, placed it under monitoring, and continues to work on enhancing its blocklisting efforts to mitigate its impact on potential victims.