okx-web3-tron-usdt-trc20-000000902[.]pages[.]dev

PhishDestroy identifies an active brand impersonation domain that masquerades as OKX’s official TRC20 USDT wallet interface. The impostor site resolves to IP 172.66.47.95 and uses a Google Trust Services SSL certificate to appear legitimate. Its URL pattern (okx-web3-tron-usdt-trc20-000000902.pages.dev) falsely claims integration with the Tron network and TRC20 tokens, targeting users searching for OKX’s TRON-based deposit options. This domain was flagged after VirusTotal analysis on 5/95 security engines returned zero detections—indicating no antivirus coverage at the time of inspection. Registration data reveals Cloudflare, Inc. as the hosting provider, suggesting rapid deployment via Cloudflare Pages to evade traditional filtering. The current risk status remains under investigation, but the presence of a Google Trust Services certificate underscores the sophistication of the deception. If you visited this page, do not enter any wallet credentials or transaction data. Disconnect immediately and clear browser cache and cookies associated with the domain. Scan your device with updated antivirus software and consider revoking any exposed API keys or wallet addresses. Report the domain to OKX’s official phishing portal and share this intelligence with your security team to help prevent further propagation.