# mt5-web3-dev.pages.dev — SUSPICIOUS

> mt5-web3-dev.pages.dev is an active phishing site targeting WEB3 users. Stay vigilant and avoid interacting with this domain to protect your credentials.

## Summary
PhishDestroy identifies mt5-web3-dev.pages.dev as an active phishing domain potentially targeting users interested in WEB3 technologies. The domain’s page title "WEB3" suggests an attempt to lure users by exploiting interest in decentralized finance or blockchain applications. While the exact phishing method remains under investigation, users should consider this domain suspicious and avoid submitting any personal or financial information.

The domain mt5-web3-dev.pages.dev is registered through Cloudflare, Inc. and resolves to the IP address 172.66.47.44, a Cloudflare server providing content delivery and security services. Despite being active, VirusTotal scans show zero detections across 95 security vendors, indicating this phishing infrastructure is currently evading detection or is newly deployed. The domain uses the pages.dev subdomain service, which may lend an appearance of legitimacy by leveraging a reputable hosting provider.

Currently categorized as "under investigation," mt5-web3-dev.pages.dev remains an active threat with emerging intelligence. Users and organizations should block access to this domain and monitor for related phishing attempts. Security teams are advised to update phishing filters and educate end users about this ongoing risk. Continued monitoring and threat intelligence gathering will help clarify the scope and tactics of this campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: WEB3

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.44
- Nameservers: april.ns.cloudflare.com titan.ns.cloudflare.com
- SSL Issuer: E7

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/TDWg1gpn/5647657a430e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/15d96ea3-a43b-4e48-bb52-71cb4e4a2051
- PhishDestroy: https://phishdestroy.io/domain/mt5-web3-dev.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/mt5-web3-dev.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mt5-web3-dev.pages.dev/
Last updated: 2026-03-19