coingase--extension-dev-us[.]pages[.]dev

This domain, coingase--extension-dev-us.pages.dev, operates as a phishing site designed to impersonate cryptocurrency wallet extensions or services. The site likely presents fake login interfaces, recovery prompts, or transaction requests to trick users into disclosing private keys, seed phrases, or account credentials. Once obtained, attackers can drain digital assets from victims' wallets or gain unauthorized access to their crypto holdings. The threat extends beyond immediate financial loss, as compromised credentials may be reused across other platforms or sold on underground markets. Analysis indicates this domain was registered on February 21, 2026, through Cloudflare, Inc., and is hosted on infrastructure resolving to 172.66.47.25, a Cloudflare IP address. Security vendors on VirusTotal flagged the domain as malicious, with 17 out of 95 engines detecting it as phishing-related. The domain appears on at least one blocklist and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. If you visited coingase--extension-dev-us.pages.dev or entered any sensitive information, immediately revoke access to any associated crypto wallets or accounts. Generate new seed phrases and private keys, and transfer remaining assets to a secure wallet. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant platforms and consider notifying local cybersecurity authorities. Avoid reusing passwords or credentials exposed on this site, as attackers may attempt to exploit them elsewhere.