okx-web3-usdt-trc20-0000000005[.]pages[.]dev

PhishDestroy identifies okx-web3-usdt-trc20-0000000005.pages.dev as an active brand impersonation threat targeting OKX users. This fraudulent page masquerades as the legitimate OKX platform to deceive cryptocurrency holders, particularly those engaged in USDT TRC-20 transactions. The domain leverages a combination of social engineering tactics and technical obfuscation to appear authentic, including the misuse of legitimate cloud infrastructure and SSL certificates from Google Trust Services. This domain was flagged on [current date, derived from active status] and exhibits several red flags confirmed by independent analysis. It resolves to IP address 172.66.47.12 and is registered via Cloudflare, Inc., a service often exploited by threat actors to obscure malicious infrastructure. Notably, VirusTotal currently shows 0 detections out of 95 security engines, indicating that traditional antivirus tools have not yet flagged this threat. Such low detection rates elevate the risk profile, as users relying on automated scanning may remain unaware of the danger. If you have visited okx-web3-usdt-trc20-0000000005.pages.dev, disconnect from the internet immediately and scan your device for malware. Do not enter any credentials, cryptocurrency wallet details, or personal information on this site. Report the domain to OKX’s official fraud reporting channel and your cybersecurity team. Replace any reused passwords and monitor financial accounts for unauthorized activity. Always verify URLs manually and use bookmarked links or official OKX domains—never follow links from unsolicited messages—to prevent future exposure.