invite-banctoken[.]pages[.]dev

The domain invite-banctoken.pages.dev is a cryptocurrency phishing site engaged in brand impersonation targeting OKX users. It presents itself as a legitimate platform for a token named 'BANC Token' but is designed to deceive victims into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified, but the site operates as a scam under the guise of a cryptocurrency offering. As of the latest verification, invite-banctoken.pages.dev has been taken offline.

Technical analysis reveals that invite-banctoken.pages.dev was flagged by 1 of 95 security vendors on VirusTotal, including Ermes. The domain is registered through Cloudflare, Inc., with a creation date of 2026-02-23 03:15:03, and resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335) in the US. It appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer. The site had no SSL certificate, and its nameservers are beth.ns.cloudflare.com and duke.ns.cloudflare.com. The observed page title was 'BANC Token | Members'.

Individuals who interacted with invite-banctoken.pages.dev should immediately change any credentials or passwords used on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. Since this is a cryptocurrency-related scam, victims should also review and revoke any token approvals granted to unknown or suspicious contracts using tools like Etherscan or blockchain explorers. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime units to aid in broader takedown efforts.