coin-browser-ext[.]pages[.]dev

The domain coin-browser-ext.pages.dev poses as a legitimate Coinbase Wallet extension, aiming to deceive users into sharing sensitive cryptocurrency information. With a VirusTotal score of 14/95, this site is flagged by multiple security scanners as a phishing threat. The malicious intent is clear, as it exploits the trusted brand of Coinbase to lure potential victims.

This domain is registered through Cloudflare, Inc. and is 2001 days old, indicating a long-standing presence on the internet. It is hosted on an IP address of 172.66.44.159, which is associated with multiple blocklist entries. The site currently remains active, and its prolonged existence raises concerns regarding its infrastructure and sustainability as a phishing platform.

PhishDestroy has identified this domain as a threat and is actively monitoring its status. The site has not yet been taken down, but it has been reported and blocklisted to prevent further access by potential victims. Continuous vigilance is being maintained to manage this threat effectively.