help-coinbase-secure[.]framer[.]media
Domain Security & Threat Intelligence Report
Analyst Security Overview
AI-GeneratedThe domain help-coinbase-secure.framer.media is designed to impersonate Coinbase by mimicking its sign-in page. With a VirusTotal score of 16 out of 95, it has been flagged as a phishing threat by multiple security vendors, indicating its potential danger to users seeking to access their cryptocurrency accounts. This domain is actively deceiving users, posing a risk of credential theft.
Registered with CSC Corporate Domains, Inc., this domain is over 1558 days old, which suggests it has been operating for a significant period. The IP address 35.71.142.77 is currently associated with the site, which has been noted on several blocklists. The domain's presence on these lists, along with its active status, underscores the need for vigilance among Coinbase users.
PhishDestroy is actively monitoring this phishing domain and has reported it to relevant authorities. As it remains active, users are advised to remain alert and refrain from entering personal information through this fraudulent site.
Threat Response Pipeline
Public Blocklist Status
Website Screenshot
Domain Intelligence
ns-1854.awsdns-39.co.uk
ns-535.awsdns-02.net
ns-97.awsdns-12.com
VirusTotal Analysis
Evidence & External Reports
URLScan Report
VirusTotal
URLQuery
Wayback Machine
WHOIS Lookup
Cloudflare Radar 
Shodan
ScamAdviser
ChainAbuse
Were You Affected by This Site?
If you have interacted with this domain, entered personal information, or connected a cryptocurrency wallet — take immediate action. Below are resources to help you report the incident and protect yourself.
Report to Your Local Authorities
Select your country to see local cybercrime reporting contacts and complaint templates.
Related Domain Reports
Other Domains on 35.71.142.77
More Domains at CSC Corporate Domains, Inc.
Stay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive