# extn-walle-base.pages.dev — MALICIOUS

> extn-walle-base.pages.dev is flagged for phishing and social engineering. Avoid this site and stay safe online. Learn what to do if you visited it.

## Summary
PhishDestroy identifies extn-walle-base.pages.dev as a high-risk phishing domain designed to deceive users and steal sensitive information. The domain was created recently and has been flagged by multiple security services for social engineering tactics, posing a significant danger to unsuspecting visitors.

This phishing site operates by masquerading as a legitimate platform, tricking users into submitting personal or financial data. It is registered through Cloudflare and has appeared on several security blocklists, including Google Safe Browsing, which highlights its association with social engineering attacks.

If you have visited extn-walle-base.pages.dev, it is crucial to avoid entering any information and immediately run a security scan on your device. Change any passwords that may have been exposed and monitor your accounts for suspicious activity. Staying informed and cautious can help protect your data from phishing threats like this one.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.177
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kolton.ns.cloudflare.com", "raina.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ad70d-54ad-709e-9f57-ab691f055653.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8b8dbc34-b9dd-475e-988a-6607198d8fc3
- PhishDestroy: https://phishdestroy.io/domain/extn-walle-base.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/extn-walle-base.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/extn-walle-base.pages.dev/
Last updated: 2026-03-19