okx-web3-tron-usdt-trc20-000000885[.]pages[.]dev

PhishDestroy identifies okx-web3-tron-usdt-trc20-000000885.pages.dev as an active crypto drainer impersonating the OKX brand. This elevated-risk site is designed to trick users into connecting wallets and siphon TRC-20 USDT via TRON smart contract interactions, posing immediate financial harm to visitors. This domain was flagged by 8 out of 95 VirusTotal security vendors, indicating strong consensus on its malicious nature. It resolves to IP address 188.114.96.3 and is served through Cloudflare, Inc., which masks the true hosting origin. The site uses a Google Trust Services SSL certificate to appear legitimate, but its pages.dev subdomain and sequential numeric path (000000885) are red flags for automated deployment. No public creation date is available due to Cloudflare’s privacy protections, but the domain has already appeared on multiple threat intelligence blocklists. To mitigate risk, users must avoid clicking or interacting with this link entirely. Never connect a wallet or enter credentials on pages.dev subdomains claiming to offer OKX services. Always verify URLs through PhishDestroy’s live database before engaging. If you’ve already visited, revoke any unauthorized wallet connections immediately and scan your device for malware. Report this domain to OKX’s official fraud channels to help protect others.