browserweb[.]comDomain
Reported by 2 independent sources · first reported by Socket · last reported
Last reported 16 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases“[email redacted]@browserweb[.]com@2.1”
-
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials“One, [email redacted]@browserweb[.]com, packages exfiltration code but is broken as shipped: its manifest does not load background.js, and its frontend sends SEED_PHRASE_IMPORT while the packaged background handles only WALLET_SYNC.”
Indicators reported together
named in the same reports- icy-star-f45c.workers[.]devin 2 reports
- webtools[.]coin 2 reports
- tabtools[.]coin 2 reports
- fasttools[.]coin 2 reports
- protools[.]netin 2 reports
- webtools[.]comin 2 reports
- neattools[.]comin 2 reports
- fondationanimalaidrelief.workers[.]devin 1 report
- api.rabby[.]ioin 1 report
- download.rabby[.]ioin 1 report
- static-assets.rabby[.]ioin 1 report
- static.debank[.]comin 1 report
- static-assets.debank[.]comin 1 report
- matomo.debank[.]comin 1 report
- hxxps://silent-wind-get.icy-star-f45c.workers[.]dev/in 1 report
- silent-wind-get.icy-star-f45c.workers[.]devin 1 report
- hxxps://small-boat-969c.icy-star-f45c.workers[.]dev/in 1 report
- small-boat-969c.icy-star-f45c.workers[.]devin 1 report
- hxxps://green-firefly-ab28.icy-star-f45c.workers[.]dev/in 1 report
- green-firefly-ab28.icy-star-f45c.workers[.]devin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.