okx-web3-tron-usdt-trc20-000000750[.]pages[.]dev

Analysis of the domain okx-web3-tron-usdt-trc20-000000750.pages.dev indicates a high-risk brand impersonation targeting OKX, a cryptocurrency exchange. The domain was registered on December 4, 2024, through Cloudflare, Inc., and remains active as of July 12, 2026. The page title explicitly displays 'OKX,' reinforcing the impersonation intent. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3 and employs technologies including jQuery, HSTS, Cloudflare, and HTTP/3. SSL certification is provided by Google Trust Services. Security vendor assessments show limited but concerning detection: one of 95 vendors on VirusTotal flags the domain, and it appears on a single security blocklist. The domain is currently blocked by PhishDestroy, with a Gridinsoft trust score of 0/100, indicating no confidence in its legitimacy. No evidence of a phishing kit or additional malicious payloads has been confirmed at this time. Defenders should treat this domain as an active threat. Blocking at the DNS or proxy level is recommended, particularly for environments handling cryptocurrency transactions. Further investigation into associated IP addresses and certificate chains may reveal additional infrastructure linked to this campaign. The exact content and functionality of the site remain unanalysed, so user interaction should be assumed to pose a risk of credential theft or fraudulent transactions.