# green-bitcointoken.pages.dev — SUSPICIOUS

> green-bitcointoken.pages.dev impersonates OKX to lure users with green staking rewards. Stay alert and avoid this offline phishing domain.

## Summary
PhishDestroy has identified green-bitcointoken.pages.dev as a suspicious domain impersonating the cryptocurrency platform OKX. Although currently offline, the domain posed a potential risk by imitating a trusted brand to deceive users into engaging with fraudulent content. Such phishing schemes can lead to exposure of personal credentials or financial information.

This phishing attempt worked by creating a webpage titled “Green Bitcoin | Gamified green staking rewards” to attract cryptocurrency enthusiasts interested in eco-friendly investment opportunities. By using the OKX brand's reputation, the site aimed to trick visitors into believing it was a legitimate service. The domain was registered via Cloudflare and appeared on two security blocklists, but VirusTotal scans detected no flags, making early detection more challenging.

If you have visited green-bitcointoken.pages.dev, it is advisable to remain cautious. Do not enter any personal or financial information if prompted. Monitor your accounts for unusual activity and consider changing passwords associated with your crypto services. Reporting the incident to your security team or service provider can help protect others from similar threats. Always verify URLs and remain vigilant when dealing with unfamiliar domains promoting investment opportunities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: OKX
- Page title: Green Bitcoin | Gamified green staking rewards

## Domain Intelligence
- Registered: 2026-03-05 01:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dana.ns.cloudflare.com jonah.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/tMWn1pwJ/91e15ec50c33.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/green-bitcointoken.pages.dev
- Wayback Machine: https://web.archive.org/web/https://green-bitcointoken.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/green-bitcointoken.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/green-bitcointoken.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/green-bitcointoken.pages.dev/
Last updated: 2026-03-19