# creat-coinb-browser-extension.pages.dev — MALICIOUS

> Warning: creat-coinb-browser-extension.pages.dev is flagged for phishing. Avoid interaction and stay protected from this high-risk domain.

## Summary
PhishDestroy identifies creat-coinb-browser-extension.pages.dev as a high-risk generic phishing domain. This domain posed a significant threat by attempting to deceive users, potentially compromising sensitive information through fraudulent means.

Supporting intelligence reveals the domain was registered on February 21, 2026, via Cloudflare, Inc., and is currently flagged by Google Safe Browsing for social engineering. Additionally, 14 out of 95 security vendors on VirusTotal have detected malicious activity linked to this domain. It also appears on three separate security blocklists, underscoring its malicious intent.

The domain has since been taken offline, effectively mitigating immediate risks. Users are advised to remain vigilant and avoid any interaction with similar suspicious browser extension domains. Continuous monitoring and user education remain critical to defend against such phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.113
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["chelsea.ns.cloudflare.com", "damon.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b6727-69ce-7685-9530-a5a2e9d5d8be.png
- PhishDestroy: https://phishdestroy.io/domain/creat-coinb-browser-extension.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/creat-coinb-browser-extension.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/creat-coinb-browser-extension.pages.dev/
Last updated: 2026-03-19