okx-web3-usdt-trc20-00000000002[.]pages[.]dev

The domain okx-web3-usdt-trc20-00000000002.pages.dev was registered on 28 March 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. and geolocated to Canada. The site presents an SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid TLS chain but offering no assurance of legitimacy. Passive fingerprinting shows the presence of jQuery, HTTP/3, HSTS, and Cloudflare as the hosting platform. The page title returned by the server is “OKX”, matching the targeted brand OKX, and the intelligence classifies the activity as a brand‑impersonation scam. VirusTotal scans have flagged the domain by 6 of 94 vendors, and it appears on at least one public blocklist, with PhishDestroy already listing it as blocked. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The domain remains active as of 12 July 2026 and no further content analysis is available, so the exact payload or credential‑harvesting mechanisms cannot be confirmed. Defenders should treat the domain as high‑risk, add it to deny‑list policies, monitor outbound connections to the associated IP, and enforce strict brand‑specific URL filtering for any OKX‑related traffic.