# chirptoken.pages.dev — SUSPICIOUS

> PhishDestroy identifies chirptoken.pages.dev as a fake OKX login page posing as a crypto drainer. 0/95 VirusTotal detections so far.

## Summary
PhishDestroy identifies chirptoken.pages.dev as a live brand-impersonation site aimed at OKX users. The page masquerades as an official OKX login portal but is designed to harvest credentials or seed phrases. Anyone who enters account details risks immediate loss of crypto assets, as drainers can silently transfer funds from connected wallets moments after capture.

This domain was flagged by PhishDestroy on 7682d8. Technical indicators include an SSL certificate issued by Google Trust Services (covering *.pages.dev) and a single resolving IP address 188.114.97.3. Registration occurred through Cloudflare, Inc., and VirusTotal currently shows zero detections out of 95 engines—indicating it remains under the radar while active.

If you visited chirptoken.pages.dev, assume credentials or seed phrases entered were compromised. Immediately revoke wallet connections in your OKX settings or via wallet-connect dashboards, transfer remaining assets to a new wallet with a different seed, and enable two-factor authentication on all exchange accounts. Report the incident to OKX support using the official phishing form and scan your device with updated anti-malware tools.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d349e5bf-c6a9-4130-9321-08cc70945ed3
- PhishDestroy: https://phishdestroy.io/domain/chirptoken.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/chirptoken.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chirptoken.pages.dev/
Last updated: 2026-03-28