okx-web3-tron-usdt-trc20-000000451[.]pages[.]dev

PhishDestroy identifies okx-web3-tron-usdt-trc20-000000451.pages.dev as a malicious domain actively impersonating OKX, a major cryptocurrency exchange. This site is designed to trick users into believing it is an official OKX platform, potentially leading to credential theft or unauthorized cryptocurrency transfers. The threat is still under investigation, but current evidence suggests it poses a credible risk to users who interact with it.

This domain was flagged due to its clear intent to impersonate OKX, leveraging a Cloudflare registration and resolving to IP address 188.114.97.3. VirusTotal currently shows 0 detections out of 95 scanners, indicating it remains undetected by many security tools. The domain uses a Google Trust Services SSL certificate, further enhancing its appearance of legitimacy. While the exact creation date is not provided, the structured naming convention (including TRON, USDT, and TRC20 references) suggests it was deployed recently to capitalize on current trends in cryptocurrency trading.

If you have visited this domain, avoid entering any personal information, login credentials, or cryptocurrency wallet details. Disconnect from the site immediately and scan your device for malware using reputable security software. Report the domain to OKX’s official support channels and consider revoking any API keys or permissions you may have inadvertently granted. Monitor your financial accounts and cryptocurrency wallets for unusual activity, and use a password manager to avoid manually entering credentials on untrusted sites. Stay vigilant, as this domain may evolve or spawn similar variants to evade detection.