pay-for-usdt-trc20-000067[.]pages[.]dev

The domain pay-for-usdt-trc20-000067.pages.dev has been identified in threat intelligence as engaging in brand impersonation of OKX. Registration occurred on November 09, 2024 through Cloudflare, Inc. Current status shows the domain as active with an HTTP response code of 200. Infrastructure details reveal resolution to IP 172.66.44.156 hosted by Cloudflare in the United States. Nameserver configuration consists of garret.ns.cloudflare.com and val.ns.cloudflare.com. Security indicators include appearance on a single blocklist, VirusTotal flagging by 13 of 91 vendors, and a Gridinsoft trust score of 0 out of 100. Additional blocking is noted from PhishDestroy. Detected technologies encompass jQuery along with HSTS, Cloudflare services and HTTP/3 protocol support. The SSL certificate issuer is Google Trust Services under the WE1 designation. The associated page title matches OKX. Defenders reviewing this entry are advised to incorporate the domain into blocklists and investigate any related traffic logs for connections originating from or directed to the specified IP and nameservers. Further verification through direct inspection may be required to confirm ongoing operation.