okx-web3-usdt-trc20-payfor-00000007[.]pages[.]dev

The domain okx-web3-usdt-trc20-payfor-00000007.pages.dev is flagged for brand impersonation, specifically targeting the OKX brand. No drainer kit has been detected, but the site poses a significant risk by misleading users into believing it is associated with a legitimate entity.

Infrastructure analysis reveals that the domain has a VirusTotal score of 12/95, indicating that 12 out of 95 security vendors have flagged it as malicious. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.85. It was created on October 31, 2024, and its SSL certificate is issued by Google Trust Services. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, highlighting its lack of credibility.

The current status of the domain is offline, having been taken down. It is blocked by PhishDestroy, which has likely contributed to its removal from active use. Despite the domain being offline, the elevated risk level suggests that there may still be residual threats or that similar domains could be registered in the future. Users are advised to remain vigilant and avoid clicking on links or entering personal information on any unfamiliar or suspicious-looking websites. Security teams should monitor for related domains and ensure that all known malicious indicators are included in their threat intelligence feeds.