learn-coinpro-base[.]framer[.]ai
“Coinbase Login - Buy and Sell Bitcoin, Ethereum”
learn-coinpro-base.framer.ai — Konten tidak tersedia. Peniruan identitas merek: Coinbase; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 8/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, ESET); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain learn-coinpro-base.framer.ai was observed hosting a page titled “Coinbase Login – Buy and Sell Bitcoin, Ethereum,” explicitly targeting Coinbase users. The site was provisioned on Amazon Web Services (AS16509) and resolved to 52.223.52.2, an IP address located in the United States. DNS records use the AWS Route 53 name servers ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns, indicating standard cloud‑based hosting. The TLS certificate is issued by Let’s Encrypt (E8), providing HTTPS with HSTS and HTTP/3 support. Technical fingerprints show the site was built with Framer Sites and React, consistent with the observed “Framer Sites” tag.
The HTTP response returned a 404 status, and the domain is currently taken offline. Registration data shows the domain was created on 04 April 2023 through CSC Corporate Domains, Inc. The domain appears on one security blocklist and has been actively blocked by PhishDestroy. Google Safe Browsing classifies the URL as a social‑engineering threat. VirusTotal scans reported eight of ninety‑three security vendors flagging the domain as malicious, reinforcing the suspicion of a crypto‑related scam.
The overall risk assessment is elevated due to the combination of brand impersonation, cloud hosting, and multiple independent detections. Defenders should add learn-coinpro-base.framer.ai to outbound and inbound blocklists, monitor AWS‑hosted subdomains for re‑registration, and update URL‑filtering rules to catch similar “framer.ai” patterns. Incident response teams should treat any login attempts to this URL as compromised and advise users to avoid submitting credentials. Continuous threat‑intel feeds should be consulted for any resurgence of the domain or related infrastructure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive