blockchain-web3[.]pages[.]dev

PhishDestroy identifies an active phishing domain targeting cryptocurrency users: blockchain-web3.pages.dev. This domain is currently engaged in a generic phishing campaign designed to deceive victims into surrendering sensitive wallet credentials or financial information. The operation remains active as of the latest analysis. blockchain-web3.pages.dev was flagged by 1 of 95 VirusTotal vendors, indicating limited but confirmed malicious activity. The domain is registered through Cloudflare, Inc., resolves to IP address 188.114.97.3, and holds a valid SSL certificate issued by Google Trust Services. While no creation date is publicly available, the site’s infrastructure and certificate issuer suggest recent deployment with a focus on evading detection through reputable hosting and encryption. Its low trust score across security platforms underscores its elevated risk profile. Organizations and individuals should immediately block access to blockchain-web3.pages.dev and monitor network traffic for connections to 188.114.97.3. Users are advised to avoid clicking links related to this domain and verify any unsolicited crypto-related communications through official channels. Security teams should update blocklists and deploy behavioral monitoring to detect follow-on compromise attempts. PhishDestroy continues to track this domain and will issue updates if the threat escalates or shifts tactics.