coinb-extension--interface-doc[.]pages[.]dev

The domain coinb-extension--interface-doc.pages.dev is identified as a generic_phishing site. It impersonates a Cloudflare interface, likely to deceive users into divulging sensitive information. The site does not appear to be using a specific drainer kit for credential harvesting or malware distribution.

Infrastructure analysis reveals that the domain has a VirusTotal detection score of 1/95, indicating a low level of detection among security vendors. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It was created on April 09, 2026, and currently appears on 3 security blocklists. The site has been taken offline, and the Gridinsoft trust score is 0/100, reflecting a complete lack of trust in the domain's legitimacy.

As of the current status, the domain is offline, which reduces the immediate risk to users. However, the domain's presence on multiple blocklists and its low trust score suggest that it was actively used for phishing campaigns. Security researchers recommend that users who may have visited this site or provided any personal information should monitor their accounts for unauthorized activity and consider changing their passwords. Additionally, organizations should update their security policies to include this domain in their threat intelligence databases to prevent future incidents.