nav-coinebse[.]pages[.]dev

The domain nav-coinebse.pages.dev has been identified as a potential threat related to credential theft. This domain appears to impersonate a recognized brand in the financial sector, likely aiming to deceive users into revealing sensitive information. No specific drainer kit has been identified in association with this domain.

Technical analysis of nav-coinebse.pages.dev reveals several indicators of malicious activity. The domain was flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of concern. It was registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. The domain was created on November 4, 2025, and is currently listed on one security blocklist. It is noteworthy that the domain's SSL certificate is issued by Google Trust Services / WE1, which may lend it an appearance of legitimacy.

Currently, the domain is offline, having been taken down likely due to its association with phishing activities. This response reduces the immediate threat posed by the domain. However, users are advised to remain vigilant and avoid interaction with similar domains. The presence of the domain on security blocklists and its detection by multiple security vendors underscore the importance of exercising caution and employing robust security measures to prevent credential theft.