# mql5.software — SUSPICIOUS

> PhishDestroy flags mql5.software for phishing risk. Domain under active review. Stay alert and avoid interactions with this site.

## Summary
PhishDestroy identifies mql5.software as an active generic phishing threat currently under investigation. The risk level remains elevated due to suspicious indicators.

The domain mql5.software was registered recently on June 5, 2024, through Ultahost, Inc and resolves to IP 82.41.181.74. Despite zero detections on VirusTotal, its low PageSpeed score of 37/100 and new registration suggest hurried deployment typical of phishing infrastructure.

Users should exercise caution and avoid engaging with this domain. PhishDestroy continues to monitor its activity as part of threat intelligence efforts to mitigate potential victim impact.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: MQL5 Forex: Expert Advisors & Automated Trading Bots for MT4/MT5

## Domain Intelligence
- Registered: 2024-06-05 09:11:14
- Registrar: Ultahost, Inc
- IP: 82.41.181.74
- Nameservers: ignacio.ns.cloudflare.com ivy.ns.cloudflare.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/k2TYGPbT/fe03e110dd42.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2b9e7ef9-9c4b-4f3a-a4c2-4fe9a6b8c656
- PhishDestroy: https://phishdestroy.io/domain/mql5.software/
- LLM endpoint: https://phishdestroy.io/domain/mql5.software/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mql5.software/
Last updated: 2026-03-19