okx-web3-tron-usdt-trc20-000000440[.]pages[.]dev

This domain is actively impersonating OKX, a major cryptocurrency exchange, to deceive users into disclosing sensitive wallet credentials or transferring digital assets under false pretenses. The fraudulent site mimics legitimate OKX web3 and TRC-20 USDT transaction interfaces, specifically targeting users engaging in Tron-based token operations. Analysis indicates the domain is designed to harvest login details, private keys, or seed phrases, potentially leading to unauthorized access and theft of cryptocurrency holdings. Infrastructure analysis reveals the domain was registered on April 03, 2026, through Cloudflare, Inc., and currently resolves to IP address 172.66.47.111. It is flagged by Google Safe Browsing as phishing and appears on one security blocklist. VirusTotal reports 1 out of 95 security vendors have detected the domain as malicious, while its SSL certificate is issued by Google Trust Services (WE1). The page title explicitly displays 'OKX,' reinforcing the brand impersonation tactic. Users who have visited this domain or interacted with its content should immediately revoke any active sessions, change passwords for associated accounts, and monitor for unauthorized transactions. If cryptocurrency was transferred or wallet credentials were entered, affected parties should consider migrating funds to a new wallet and reporting the incident to relevant financial and cybersecurity authorities. The domain remains active, and continued vigilance is advised for similar impersonation attempts targeting digital asset platforms.