cloud-coinbse-extnsions[.]pages[.]dev

This domain is flagged as a high-risk phishing site specifically designed to impersonate cryptocurrency exchange login portals. Analysis indicates the threat type is a fake login page targeting users of crypto platforms, likely aiming to harvest credentials or deploy wallet-draining scripts. The domain exhibits multiple technical indicators consistent with malicious infrastructure. Infrastructure analysis reveals the domain was registered on November 05, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.47.147. The SSL certificate is issued by Google Trust Services (WE1). VirusTotal detection shows 15 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and Google Safe Browsing has classified it as phishing. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its malicious nature, though the site is currently offline. Mitigation steps for this threat type include immediate revocation of any credentials potentially exposed to the domain. Users should enable multi-factor authentication on all cryptocurrency exchange accounts and verify the legitimacy of any login portal by cross-referencing the URL with the official exchange domain. Network-level blocking of the domain and its resolving IP (172.66.47.147) is recommended for organizations. Additionally, cryptocurrency wallet users should monitor for unauthorized transactions and consider revoking permissions for any suspicious dApps or browser extensions linked to this domain.