coinbas-pro-loggin[.]framer[.]ai

The domain coinbas-pro-loggin.framer.ai is a fraudulent cryptocurrency phishing site that impersonates the Coinbase brand. The page title, "Coinbase Pro Login | Secure Access to Advanced Trading," is designed to trick users into believing it is a legitimate login portal for Coinbase Pro. The primary threat posed by this site is credential theft, as it likely harvests login credentials and potentially other sensitive financial information from victims attempting to access their cryptocurrency accounts.

Technical analysis reveals that the site is flagged by 10 out of 95 VirusTotal vendors as malicious. Google Safe Browsing has flagged the domain for SOCIAL_ENGINEERING, indicating it is used in a phishing campaign. The site is hosted on IP address 35.71.142.77, which is associated with AS16509 Amazon.com, Inc. in the United States. The domain was registered on 2018-01-06 through registrar CSC Corporate Domains, Inc. and uses a Let's Encrypt SSL certificate (E8). The nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns. The site is currently offline.

The current status of the domain is down/offline, which may indicate it has been taken down or is temporarily inactive. The risk level for users who may have previously visited the site is high, as any credentials entered could have been compromised. Users should avoid any interaction with this domain and change passwords if they have used it.