# coinbase-loginsignin.framer.website — MALICIOUS

> coinbase-loginsignin.framer.website is a high-risk phishing domain. Avoid entering credentials and verify sites carefully to stay safe online.

## Summary
PhishDestroy identifies coinbase-loginsignin.framer.website as a high-risk credential phishing threat targeting Coinbase users. The domain impersonates legitimate login portals to steal sensitive information.

Evidence includes its creation date in early 2026, registration via Cloudflare, and detection by multiple security vendors and blocklists. Google Safe Browsing flags it for social engineering, confirming its malicious intent.

Currently offline, this domain poses no immediate threat. Users should remain cautious, avoid suspicious links, and verify web addresses before submitting credentials.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Target brand: Coinbase
- Page title: Site Not Found | Framer

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: CSC Corporate Domains, Inc.
- Country: US
- Nameservers: ["ns-1243.awsdns-27.org", "ns-1818.awsdns-35.co.uk", "ns-336.awsdns-42.com", "ns-792.awsdns-35.net"]

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "Chong Lua Dao", "CRDF", "CyRadar", "Emsisoft", "Google Safebrowsing", "Kaspersky", "Lionic", "Netcraft", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d32882af-dfcd-43d7-8278-33dd59026b8c
- PhishDestroy: https://phishdestroy.io/domain/coinbase-loginsignin.framer.website/
- LLM endpoint: https://phishdestroy.io/domain/coinbase-loginsignin.framer.website/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase-loginsignin.framer.website/
Last updated: 2026-03-19