# verifytoken.life — SUSPICIOUS

> verifytoken.life is a brand impersonation site falsely claiming to be OKX. VirusTotal shows 0/95 detections despite active hosting.

## Summary
PhishDestroy identifies verifytoken.life as an active brand impersonation domain targeting OKX users, likely deployed as a crypto drainer to steal digital assets. Registered on April 04, 2026, this domain mimics the legitimate OKX platform to deceive victims into connecting wallets or entering credentials under false pretenses. While no specific drainer kit hash or kit signature is publicly available, the operational timeline and SSL issuance suggest a recently activated campaign leveraging impersonation to exploit trust in the OKX brand.

Technical indicators confirm high-risk attributes: the domain resolves to IP 77.245.76.110, was registered through GoDaddy.com, LLC, and secured via a Let’s Encrypt SSL certificate. As of current checks, VirusTotal reports 0 detections out of 95 engines, indicating evasion of signature-based detection. The domain has not been flagged by Google Safe Browsing (GSB) at this time, and no third-party blocklists have been documented. Domain age analysis shows a recent creation date, consistent with short-lived campaign infrastructure.

Current status is active, with no active takedown or blocklisting observed. Response actions include ongoing monitoring and domain reputation tracking under seed 6b1a43. Remaining risk is elevated due to zero detections, active hosting, and brand impersonation intent. Users are strongly advised to avoid interacting with verifytoken.life, verify all domains via official channels, and report any suspicious activity to security teams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2026-04-04 04:47:42
- Registrar: GoDaddy.com, LLC
- IP: 77.245.76.110

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/verifytoken.life
- PhishDestroy: https://phishdestroy.io/domain/verifytoken.life/
- LLM endpoint: https://phishdestroy.io/domain/verifytoken.life/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/verifytoken.life/
Last updated: 2026-04-04