# okx-web3-tron-usdt-trc20-000000885.pages.dev — MALICIOUS

> okx-web3-tron-usdt-trc20-000000885.pages.dev is a crypto drainer impersonating OKX. 8/95 VirusTotal vendors flag it. Verify on PhishDestroy before interacting.

## Summary
PhishDestroy identifies okx-web3-tron-usdt-trc20-000000885.pages.dev as an active crypto drainer impersonating the OKX brand. This elevated-risk site is designed to trick users into connecting wallets and siphon TRC-20 USDT via TRON smart contract interactions, posing immediate financial harm to visitors.  This domain was flagged by 8 out of 95 VirusTotal security vendors, indicating strong consensus on its malicious nature. It resolves to IP address 188.114.96.3 and is served through Cloudflare, Inc., which masks the true hosting origin. The site uses a Google Trust Services SSL certificate to appear legitimate, but its pages.dev subdomain and sequential numeric path (000000885) are red flags for automated deployment. No public creation date is available due to Cloudflare’s privacy protections, but the domain has already appeared on multiple threat intelligence blocklists.  To mitigate risk, users must avoid clicking or interacting with this link entirely. Never connect a wallet or enter credentials on pages.dev subdomains claiming to offer OKX services. Always verify URLs through PhishDestroy’s live database before engaging. If you’ve already visited, revoke any unauthorized wallet connections immediately and scan your device for malware. Report this domain to OKX’s official fraud channels to help protect others.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/84fa8480-fa6f-4835-b764-437e80049fa7
- PhishDestroy: https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000885.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000885.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000885.pages.dev/
Last updated: 2026-03-28