coinbesecumsignin[.]framer[.]ai

This site, coinbesecumsignin.framer.ai, impersonates the Coinbase brand and is a cryptocurrency scam. The page title claims to be "Coinbase.com: Sign-in | Coinbase Login (Official Site)," presenting itself as a legitimate login portal. The primary threat is credential theft, as the site is designed to trick users into entering their Coinbase account credentials, which would then be stolen by the attackers.

Technical evidence confirms the malicious nature of the site. VirusTotal reports 16 detections out of 95 vendors. The domain is flagged by blocklists from ADMINUSLabs, ChainPatrol, alphaMountain.ai, CRDF, and CyRadar. It is registered with CSC Corporate Domains, Inc., and was created on 2018-01-06. The site resolves to IP address 35.71.142.77, located in the United States and hosted on AS16509 (Amazon.com, Inc.). It uses an SSL certificate issued by Let's Encrypt (E8), and its nameservers are on the awsdns network.

The current status of the site is DOWN/OFFLINE. ScamAdviser gives it a trust rating of 1 out of 100, indicating a high-risk level. Despite being offline, the domain remains registered and could be reactivated. The risk to users is severe if the site becomes active again, as it directly targets Coinbase customers for credential theft.