metamask-usdt[.]pages[.]dev

The domain metamask-usdt.pages.dev is associated with brand impersonation, specifically targeting Ethereum users. It is designed to deceive individuals by posing as a legitimate crypto-related site, with the intent of conducting phishing activities. The site was taken offline, indicating a proactive measure against its malicious activities. Its page title 'FLASH USDT GENERATOR | ERC-20' suggests an attempt to lure users with fraudulent cryptocurrency generation promises.

Technical indicators for metamask-usdt.pages.dev include detections by 3 of 95 VirusTotal vendors, namely ChainPatrol, alphaMountain.ai, and Phishing Database. The domain was registered through Cloudflare, Inc. on December 21, 2025, and resolves to the IP address 172.66.44.70 located in the United States. It appears on 4 security blocklists including PhishDestroy, MetaMask, and ScamSniffer. The SSL certificate is issued by Google Trust Services / WE1, and the site uses technologies such as HSTS, Cloudflare, and HTTP/3.

Users who have interacted with metamask-usdt.pages.dev should take immediate steps to secure their cryptocurrency holdings. This includes revoking any token approvals and transferring funds to a new wallet to prevent unauthorized access. It's advisable to change passwords and enable two-factor authentication to safeguard against further phishing attempts. If suspicious activity is detected, users should report it to relevant authorities or security platforms. Always verify domains before engaging with them to ensure they are safe and legitimate.