MALICIOUS — HIGH
Verifica phishing e sicurezza per jwwtoken1.pages.dev
jwwtoken1[.]
PhishDestroy identifies jwwtoken1.pages.dev as an active brand impersonation domain currently under investigation for cryptocurrency draining activities.
- VirusTotal
- 1/91
- Blocklists
- No stored match
- Disponibilità
- Raggiungibile · accesso limitato · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
jwwtoken1.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 1/91 (alphaMountain.ai); PhishDestroy score 68/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies jwwtoken1.pages.dev as an active brand impersonation domain currently under investigation for cryptocurrency draining activities. This domain specifically masquerades as the legitimate exchange OKX, leveraging deceptive branding to trick users into connecting cryptocurrency wallets or entering sensitive credentials. The threat remains active, with no confirmed takedown at the time of this assessment. Users are advised to exercise extreme caution when encountering this domain or any associated links.
This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious by automated security systems. It is registered through Cloudflare, Inc., resolving to IP address 188.114.96.3 with a Google Trust Services SSL certificate. While the exact registration date is not provided, the domain's creation and deployment are recent, as evidenced by its active status. The absence of VirusTotal detections, combined with Cloudflare's hosting, suggests this threat is still in its early stages of operation. Trust scores for this domain remain unverified due to its low detection rate.
The current status of jwwtoken1.pages.dev is classified as active, with a risk level marked as under investigation. PhishDestroy recommends users avoid interacting with this domain entirely. If you suspect exposure to this site, disconnect any connected cryptocurrency wallets immediately and scan your device for malware. For verification, users can cross-check the domain against PhishDestroy's latest threat intelligence database. Always verify URLs, certificates, and branding before entering sensitive information or authorizing transactions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of jwwtoken1.pages.dev · checked Apr 27, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.