okx-web3-tron-usdt-trc20-000000619.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of okx-web3-tron-usdt-trc20-000000619.pages.dev
This domain appears to host a web page presented as an OKX-branded cryptocurrency interface, with references in the hostname to Web3, TRON, USDT, and TRC20. The page title is "OKX," and the screenshot shows a minimal crypto transaction-style input screen, suggesting it may be attempting to imitate a wallet, exchange, or token-transfer workflow rather than serving as a general informational website.
Based on the hostname structure and page presentation, this does not appear to be an official primary OKX domain. Instead, it appears to be a page deployed on a shared hosting subdomain under pages.dev, which may allow users to publish custom content. The domain naming pattern and branding cues suggest the page may be intended to attract users looking for OKX-related crypto services, particularly involving TRON-based USDT transfers.
Safety Assessment for okx-web3-tron-usdt-trc20-000000619.pages.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, and available categorization data labeled it as phishing. In addition, the domain closely resembles okx.com in plain language and may be a look-alike intended to benefit from confusion with the legitimate OKX brand. The page title and screenshot also reinforce that impression by presenting OKX branding on a non-official-looking hosted subdomain.
At the same time, some checks were clean: the malware scan did not identify flagged files, and several blacklist and threat-database checks did not report active listings at the time of review. However, clean file-scan results do not outweigh the stronger phishing-related indicators here, especially given the brand resemblance, lack of ranking, and the use of a hosted subdomain rather than an obvious official corporate domain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, and it is served through Cloudflare infrastructure on IP address 172.66.47.117. The domain is hosted on a pages.dev subdomain, which suggests deployment through a static or edge-hosted publishing platform rather than a dedicated standalone corporate web property. The WHOIS data indicates the subdomain's parent registration has existed for several years, but that age should not be treated as proof of legitimacy for the specific hosted page.
DNSSEC appears to be unsigned, and the server stack is fronted by Cloudflare. No malicious files or flagged external links were identified by the file-level scan provided, but one referenced external script domain appears unrelated to the pages.dev host and may warrant additional scrutiny in a phishing context.
Share your experience with this website. Was it safe? Did you encounter any issues?