# okx-web3-tron-usdt-trc20-000000902.pages.dev — SUSPICIOUS

> PhishDestroy identifies a fake OKX crypto wallet site hosted on pages.dev mimicking TRC20 USDT deposits. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies an active brand impersonation domain that masquerades as OKX’s official TRC20 USDT wallet interface. The impostor site resolves to IP 172.66.47.95 and uses a Google Trust Services SSL certificate to appear legitimate. Its URL pattern (okx-web3-tron-usdt-trc20-000000902.pages.dev) falsely claims integration with the Tron network and TRC20 tokens, targeting users searching for OKX’s TRON-based deposit options.  This domain was flagged after VirusTotal analysis on 0/95 security engines returned zero detections—indicating no antivirus coverage at the time of inspection. Registration data reveals Cloudflare, Inc. as the hosting provider, suggesting rapid deployment via Cloudflare Pages to evade traditional filtering. The current risk status remains under investigation, but the presence of a Google Trust Services certificate underscores the sophistication of the deception.  If you visited this page, do not enter any wallet credentials or transaction data. Disconnect immediately and clear browser cache and cookies associated with the domain. Scan your device with updated antivirus software and consider revoking any exposed API keys or wallet addresses. Report the domain to OKX’s official phishing portal and share this intelligence with your security team to help prevent further propagation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.95

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/okx-web3-tron-usdt-trc20-000000902.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000902.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000902.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/okx-web3-tron-usdt-trc20-000000902.pages.dev/
Last updated: 2026-04-03