[icebraining]

What if I replace the iFrame URL with an URL of a cloned page? How can the user be sure that it's really Coinbase's form?