coinss-helppro[.]framer[.]ai
“Coinbase Pro | Digital Asset Exchange®”
coinss-helppro.framer.ai — Konten tidak tersedia. Peniruan identitas merek: Coinbase; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 12/95 (ChainPatrol, alphaMountain.ai, CyRadar, ESET, Emsisoft); Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 86/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, coinss-helppro.framer.ai, was registered on 06 January 2018 through CSC Corporate Domains, Inc. It resolves to the Amazon Web Services address 52.223.52.2, which belongs to ASN 16509 (Amazon.com, Inc.) and is geolocated in the United States. The authoritative name servers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk and ns-635.awsdns, all typical of AWS‑hosted sites. The site presented the page title “Coinbase Pro | Digital Asset Exchange®”, indicating a targeted impersonation of the Coinbase brand. TLS is provided by a Let’s Encrypt certificate (issuer E8), and the server announced HSTS and HTTP/3, confirming modern web stack usage.
An HTTP request returned a 404 status, suggesting the content is no longer publicly reachable; the infrastructure has been taken offline as reported. Security‑vendor observations show mixed detection: Gridinsoft assigned a trust score of 0 / 100, and VirusTotal recorded 12 detections out of 95 scanners. Google Safe Browsing classifies the URL as social‑engineering, and PhishDestroy has listed the domain on its blocklist, which also appears on one additional security blocklist. The underlying technology stack was identified as Framer Sites running React.
Evidence confirms a high‑risk brand‑impersonation campaign aimed at Coinbase users, but the exact payload or credential‑harvesting pages have not been captured. Defenders should continue to block the domain at DNS and web‑filter layers, monitor for any re‑hosting of the same hostnames or certificate fingerprints, and educate users that any request to a Framer‑hosted site claiming to be Coinbase Pro is untrusted. Ongoing vigilance is recommended because the infrastructure could be resurrected on a different AWS endpoint.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of coinss-helppro.framer.ai · checked Mar 2, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive