# okx-web3-usdt-trc20-payfor-00000097.pages.dev — SUSPICIOUS

> okx-web3-usdt-trc20-payfor-00000097.pages.dev impersonates OKX via TRC20 crypto scam detected on 188.114.97.3. Check the full report.

## Summary
PhishDestroy identifies the active domain okx-web3-usdt-trc20-payfor-00000097.pages.dev as a brand impersonation threat targeting OKX users. Investigation status remains under active review. The fraudulent site leverages Cloudflare’s infrastructure and resolves to IP 188.114.97.3, with a Google Trust Services SSL certificate currently assigned to the domain.

This domain was flagged by 0 out of 95 VirusTotal vendors as of analysis time, indicating it has not yet triggered widespread automated detection systems despite clear impersonation indicators. Registered through Cloudflare, Inc., the site has not been reported on any major blocklists. Trust scores remain neutral due to low detection coverage, but behavioral analysis confirms malicious intent through TRC20 USDT payment prompts mimicking legitimate OKX services.

Users should avoid interacting with this domain or any associated links. Block the IP 188.114.97.3 at firewall and DNS levels. Report the domain to OKX abuse channels and update browser blocklists immediately. Exercise heightened scrutiny for domains using autogenerated suffixes like .pages.dev when soliciting cryptocurrency transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/365a2d1c-29cd-4c2d-be0a-b45579c03510
- PhishDestroy: https://phishdestroy.io/domain/okx-web3-usdt-trc20-payfor-00000097.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/okx-web3-usdt-trc20-payfor-00000097.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/okx-web3-usdt-trc20-payfor-00000097.pages.dev/
Last updated: 2026-03-30