# dogeballtoken.xyz — SUSPICIOUS

> dogeballtoken.xyz poses as OKX in a brand impersonation scam with 0/95 VirusTotal detections. Avoid interacting and report immediately.

## Summary
PhishDestroy identifies dogeballtoken.xyz as an active brand impersonation domain targeting OKX users for potential crypto drainer deployment. The domain mimics the OKX cryptocurrency exchange branding to deceive visitors into connecting wallets or entering credentials, exposing victims to fund theft. While no drainer kit fingerprint has been extracted yet, the site's naming convention (dogeballtoken) suggests a memecoin-themed lure, a common tactic among fraudulent crypto initiatives.  dogeballtoken.xyz exhibits a concerning technical profile: 0 out of 95 VirusTotal engines flagged it as malicious at last inspection, indicating zero automated detection despite the domain's suspicious branding. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP 188.114.97.3 and employs a Let's Encrypt SSL certificate for superficial legitimacy. Created on March 10, 2026—less than 24 hours ago—this domain is exceedingly fresh, leaving minimal historical data for behavioral analysis. Google Safe Browsing (GSB) status is currently unlisted, and the domain does not appear on major threat intelligence blocklists such as URLVoid or PhishTank as of this report.  This domain remains in the under-investigation status, but the convergence of brand impersonation, zero detections, and a newly registered TLD (.xyz) elevates the threat level significantly. Users are advised to avoid visiting dogeballtoken.xyz entirely. If you suspect exposure, revoke any connected wallet permissions immediately, monitor on-chain transactions for unauthorized transfers, and submit the domain to threat intelligence platforms for community-wide protection. Security teams should flag 188.114.97.3 at perimeter defenses. Remaining risk is high due to low detection coverage and high evasion potential.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2026-03-10 23:47:04
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/76c33fd3-66b2-4681-8985-f669047cf2c6
- PhishDestroy: https://phishdestroy.io/domain/dogeballtoken.xyz/
- LLM endpoint: https://phishdestroy.io/domain/dogeballtoken.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dogeballtoken.xyz/
Last updated: 2026-03-23