# pay-for-usdt-trc20-000289.pages.dev — MALICIOUS

> pay-for-usdt-trc20-000289.pages.dev lures users with fake PayPal to TRC20 USDT trades. 15/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies pay-for-usdt-trc20-000289.pages.dev as an active phishing page that specifically impersonates PayPal’s USDT TRC20 deposit service to steal cryptocurrency.

This domain was flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category and currently shows 15 out of 95 VirusTotal security vendors detecting malicious content. The site is registered through Cloudflare, Inc., resolves to IP 172.66.46.220, and holds a Google Trust Services SSL certificate. Users who click links in unsolicited emails, social media ads, or search results may be redirected to a spoofed PayPal page that requests TRC20 USDT deposits labeled as instant cash-outs.

If you visited this domain, immediately disconnect any wallets or browser extensions connected to it. Revoke any TRC20 USDT transaction approvals via your wallet’s settings and scan your device with updated antivirus software. Report the domain to your wallet provider and file a complaint with the platform you believed you were interacting with—this helps block future campaigns using the same seed a491ec.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.220

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/pay-for-usdt-trc20-000289.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/pay-for-usdt-trc20-000289.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/pay-for-usdt-trc20-000289.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pay-for-usdt-trc20-000289.pages.dev/
Last updated: 2026-04-08