sealana-tokens[.]pages[.]dev

PhishDestroy identifies sealana-tokens.pages.dev as an active domain engaged in brand impersonation targeting OKX users. The site attempts to trick visitors into connecting crypto wallets by mimicking the OKX exchange interface. While no public drainer code is yet confirmed, the domain’s structure and hosting environment align with known crypto drainer campaigns aimed at siphoning assets from unwitting users. Technical indicators for sealana-tokens.pages.dev include a VirusTotal detection rate of 6/95, indicating no antivirus engines currently flag the domain. Registered through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3, which is hosted on Google Trust Services SSL infrastructure. The domain was created recently and remains unlisted on major blocklists such as Google Safe Browsing (GSB status: unflagged), suggesting early-stage deployment designed to evade detection. The combination of a fresh domain, zero detections, and impersonation of a major crypto brand poses a heightened risk of financial fraud. This domain remains active and is currently under investigation by PhishDestroy. Users are advised to avoid visiting sealana-tokens.pages.dev and to verify any OKX-related links using PhishDestroy’s real-time scanning tool. The residual risk remains high due to the absence of third-party detection and the domain’s deployment on reputable but compromised hosting (e.g., Cloudflare Pages). Immediate blocking of the domain and IP 188.114.96.3 is recommended for organizational networks. Continue monitoring for updates as this campaign evolves.