bazecoin-extnsn[.]framer[.]ai

This domain, bazecoin-extnsn.framer.ai, is an active high-risk phishing site registered through Framer B.V. on an unspecified date. Infrastructure analysis reveals it currently resolves to the IP address 31.43.161.6, though nameserver records are absent, which may indicate recent provisioning or an attempt to evade detection. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, suggesting it is actively targeting cryptocurrency users, likely through fake wallet or extension impersonation.

No brand or specific scam type is explicitly named in available data, but the domain structure and blocklist classifications imply a focus on cryptocurrency-related fraud. The absence of nameserver records and the use of Framer’s hosting infrastructure may complicate takedown efforts or attribution. Defenders should treat this domain as malicious and prioritize blocking it at the network and endpoint levels.

Monitoring for related subdomains or IP associations with 31.43.161.6 is recommended, as this address may host additional phishing infrastructure. No SSL, HTTP status, or page content analysis is currently available, so further investigation into the site’s behavior and payload is advised. Given its presence on multiple blocklists, this domain should be considered confirmed malicious rather than merely suspicious.