tokenswap-coinchef[.]pages[.]dev

The domain tokenswap-coinchef.pages.dev is currently under investigation for brand impersonation, specifically targeting the cryptocurrency service OKX. The domain's risk level is still being assessed, but it is active and poses a potential threat to users who may be deceived by its attempt to mimic a legitimate brand.

Technical analysis reveals that the domain is registered through Cloudflare Pages and resolves to the IP address 172.66.47.161, which is located in Canada under Cloudflare, Inc. Despite its presence on one security blocklist—PhishDestroy—VirusTotal has not yet flagged it, with a 0/95 detection count. The domain uses an SSL certificate issued by Google Trust Services under the WE1 designation and was created on April 02, 2026.

To mitigate potential threats from this domain, users are advised to exercise caution when handling communications that appear to originate from OKX, especially those directing to the suspect domain. Organizations should update their security blocklists to include tokenswap-coinchef.pages.dev and monitor for any attempts to access this domain within their networks. Additionally, users should be educated on recognizing phishing attempts, particularly those involving crypto-draining schemes or fake login pages designed to harvest credentials.