# mybaseusdt.pages.dev — SUSPICIOUS

> mybaseusdt.pages.dev impersonates MyBase USDT exchange to steal cryptocurrency wallet seed phrases. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies mybaseusdt.pages.dev as an active site delivering a crypto wallet phishing kit designed to trick visitors into surrendering their USDT wallet seed phrases.

This domain was flagged under investigation after VirusTotal scans showed zero detections from 95 security engines, despite resolving to IP 188.114.96.3 via Cloudflare. The certificate is issued by Google Trust Services, indicating the site uses a valid SSL layer to appear legitimate.

If you visited mybaseusdt.pages.dev, stop entering any wallet information immediately. Disconnect from the site, clear browser cache and cookies, and check your wallet’s transaction history for unauthorized transfers. Consider moving remaining funds to a fresh wallet and rotating all connected device credentials used during the session.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/88bb9c67-c96e-4bce-a473-3f2f83c5472a
- PhishDestroy: https://phishdestroy.io/domain/mybaseusdt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/mybaseusdt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mybaseusdt.pages.dev/
Last updated: 2026-03-22