pay-for-usdt-trc20-000303[.]pages[.]dev

PhishDestroy identifies pay-for-usdt-trc20-050303.pages.dev as an active crypto scam masquerading as a legitimate TRC20 USDT platform. This domain distributes malicious links under the guise of fake pay-per-click opportunities, tricking victims into depositing cryptocurrency under false pretenses. The threat actor leverages urgency and promises of instant returns to bypass user skepticism, leading to direct financial theft. This domain was flagged by 9 out of 95 security vendors on VirusTotal, raising its risk profile to elevated. It resolves to the IP 172.66.44.165 and is registered through Cloudflare, Inc., which obscures the true ownership while providing SSL encryption via Google Trust Services to appear legitimate. The combination of high blocklist presence and cloud-based infrastructure suggests an agile, low-cost operation designed to evade detection. Users who visited this site should immediately cease any crypto transactions linked to it and scan their devices for malware. Revoke any API keys or wallet permissions granted to this domain and report the fraud to local cybercrime units. Block the domain at the network level if possible. Exercise heightened caution with unsolicited crypto offers, verifying legitimacy through official channels before engaging.