chrome-extension[.]framer[.]ai

This domain is flagged for brand impersonation, posing a significant risk to users who may mistake it for a legitimate Coinbase service. The site impersonates the Coinbase Wallet extension, potentially leading users to download malicious software or enter sensitive information, which can result in financial loss or identity theft.

Analysis indicates that the domain chrome-extension.framer.ai has been flagged by 10 out of 95 security vendors on VirusTotal, suggesting a high level of suspicion. The domain was created on January 06, 2018, and is registered through CSC Corporate Domains, Inc., a known registrar. The infrastructure analysis reveals that the domain resolves to the IP address 52.223.52.2, which is located in the United States and is associated with AS16509 Amazon.com, Inc. Additionally, Google Safe Browsing has flagged the site as a phishing threat, and it appears on one security blocklist, further corroborating the risk assessment.

If a user has visited this domain, it is recommended to immediately change any passwords or credentials that may have been entered, especially those related to cryptocurrency wallets or financial accounts. Users should also run a full system scan using their antivirus software to detect and remove any potential malware. It is advisable to monitor financial accounts for any unauthorized activity and consider enabling two-factor authentication for an added layer of security. Reporting the incident to the relevant financial institution or service provider is also recommended.