satoshi-dex-token[.]pages[.]dev

This domain satoshi-dex-token.pages.dev is flagged as a high-risk brand impersonation phishing site targeting users of a decentralized exchange platform. The domain was registered on April 30, 2026, through Cloudflare, Inc., and remains active as of July 12, 2026. It resolves to IP address 172.66.47.153 located in Canada, also associated with Cloudflare. The page title retrieved is 'SatoshiDEX: The World's First Bitcoin DEX', indicating an attempt to impersonate a legitimate cryptocurrency exchange brand. The domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis from 91 security vendors shows three flagging this domain as malicious. The Gridinsoft trust score is 0 out of 100, confirming no trustworthiness. The SSL certificate is issued by Google Trust Services (WE1), which is common for Cloudflare-proxied sites and does not indicate legitimacy. Defenders should block this domain at the network and email gateway levels, monitor for any user interactions or credential submissions, and add it to threat intelligence feeds. The exact content of the hosted page has not been analyzed, but the page title and blocklist presence strongly suggest a fake login or wallet connection scheme designed to steal credentials or cryptocurrency. No additional technical indicators such as ASN, brand target beyond the title, or kit details are available in this report. Immediate action is recommended to prevent potential victim compromise.