usdt-trc20-okx-web3-0000000037[.]pages[.]dev

The domain usdt-trc20-okx-web3-0000000037.pages.dev is flagged for brand impersonation, targeting the cryptocurrency exchange OKX. No drainer kit has been identified on this domain. The threat poses a risk of users being misled to a counterfeit site where they might inadvertently share sensitive information or perform unauthorized transactions.

Infrastructure analysis reveals a VirusTotal detection score of 0/95, indicating that the domain has not been flagged by the majority of security engines. The domain is registered through Cloudflare Pages and currently resolves to the IP address 172.66.46.226, which is located in California, USA, and is associated with Cloudflare, Inc. The domain was created on March 27, 2026, and is listed on 1 security blocklist. It is not flagged by Google Safe Browsing (GSB) as of the latest check.

The domain is still active, and while it is only on one security blocklist, the risk of brand impersonation persists. Immediate response actions include monitoring the domain for changes, advising users to verify the authenticity of OKX URLs, and reporting any suspicious activity to the relevant authorities. The remaining risk is under investigation to determine the full scope of the threat and potential additional vectors of attack.