coinbse-wallet-extn[.]created[.]app

PhishDestroy assesses coinbse-wallet-extn.created.app as a high-risk domain engaged in brand impersonation, specifically targeting Coinbase users. The site masquerades as the official Coinbase Wallet Extension, attempting to trick visitors into downloading malicious software or revealing sensitive credentials. This threat type is particularly dangerous as it exploits trust in a well-known cryptocurrency platform.

Technical analysis reveals multiple red flags. VirusTotal reports that 12 out of 95 security vendors flag this domain as malicious. The domain was registered through Tucows Domains Inc. on July 12, 2023, and resolves to IP address 216.150.1.65. Its SSL certificate is issued by Let's Encrypt (R13), which is common for legitimate sites but also abused by phishers. Google Safe Browsing flags the domain as phishing, and it appears on one security blocklist. The current status indicates the domain has been taken offline, but similar threats may reappear.

Users who encounter this domain should immediately close the page and avoid any interaction. Do not download any files or enter personal information. If you have already downloaded something, run a full antivirus scan and change your Coinbase password and any other accounts using the same credentials. Report the domain to Google Safe Browsing and Coinbase's security team. Always verify URLs by checking for typos (e.g., "coinbse" instead of "coinbase") and ensure you are on the official website before downloading extensions or entering login details.