usdt-okx[.]net

The domain usdt-okx.net was set up as a phishing site designed to steal login credentials from users of the popular cryptocurrency exchange OKX. By mimicking the official OKX interface, the site tricks visitors into entering their account details, which are then captured by attackers. This type of threat, known as brand impersonation, is particularly dangerous because it targets trust in a well-known brand to harvest sensitive information that can lead to financial loss.

PhishDestroy identified this threat through multiple intelligence sources. VirusTotal reports that 20 out of 95 security vendors flag the domain as malicious, indicating strong consensus among cybersecurity tools. The domain was created on April 15, 2026, and registered through Gname.com Pte. Ltd., a registrar sometimes used for suspicious domains. It resolves to IP address 180.178.53.17 and uses an SSL certificate from ZeroSSL, which gives it a false sense of security. AlienVault OTX shows it appears in 2 threat intelligence pulses, and it is listed on 1 security blocklist. The page title displayed a 403 Forbidden error, likely because the site was taken offline after detection.

If you visited usdt-okx.net or entered any information, act immediately. Change your OKX password and enable two-factor authentication if you haven't already. Contact OKX support to alert them of the potential compromise. Monitor your accounts for any unauthorized activity. For future reference, always verify the legitimacy of any site by checking the official domain directly and using tools like PhishDestroy to stay safe from phishing threats.