okx-web3-tron-usdt-trc20-000000619[.]pages[.]dev

This domain is designed to impersonate OKX, a major cryptocurrency exchange, and poses a high risk of crypto asset theft. The site mimics legitimate OKX wallet interfaces, specifically targeting users of TRON-based USDT (TRC-20) transactions. Visitors may be tricked into entering private keys, seed phrases, or login credentials, which attackers can then use to drain funds from connected wallets. The threat operates as a crypto drainer, silently transferring assets to attacker-controlled addresses once access is granted. Analysis indicates the domain was registered on June 08, 2026, through Cloudflare Pages, a hosting service often abused for rapid deployment of fraudulent sites. VirusTotal reports 16 out of 95 security vendors flagging this domain as malicious, confirming its involvement in brand impersonation. The domain appears on one security blocklist and remains active despite detections, suggesting ongoing malicious activity. Infrastructure review shows no legitimate association with OKX, reinforcing its fraudulent nature. If you visited okx-web3-tron-usdt-trc20-000000619.pages.dev, immediately disconnect any connected wallets from the site. Revoke all active sessions and permissions granted to unknown or suspicious dApps via your wallet settings. Scan your device for malware using updated security tools. If you entered sensitive information, transfer all crypto assets to a new, secure wallet and monitor your accounts for unauthorized transactions. Report the domain to your wallet provider and relevant authorities to help prevent further incidents.