lynx-signal[.]pages[.]dev

The domain lynx-signal.pages.dev has been flagged as a generic phishing threat and is currently under investigation. It masquerades as a Chrome extension called "Lynx Signal — LinkedIn Buying Signal Detection" to deceive users into believing it is a legitimate tool. No specific brand or drainer kit has been identified in association with this domain at this time.

Technical indicators reveal that the domain was created on March 21, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Let's Encrypt (E7). VirusTotal reports 0 detections out of 95 scanners, meaning it has not yet been flagged by antivirus engines. Despite this, the domain appears on 1 security blocklist, indicating some level of suspicion. Google Safe Browsing status is not explicitly mentioned but is likely clean given the low detection rate.

The domain is currently active and still operational, posing an ongoing risk to users who may be tricked into installing the fake extension. PhishDestroy recommends that users avoid visiting this domain or downloading any software from it. If encountered, users should report the domain to relevant authorities and ensure their browser security settings are up to date. The risk remains moderate due to the lack of widespread detection, but the phishing nature of the site warrants caution.