dogevercetoken[.]pages[.]dev

The domain dogevercetoken.pages.dev, impersonating the cryptocurrency exchange OKX, has been flagged as part of a phishing scam. Despite being taken down, it was detected by 4 out of 94 vendors on VirusTotal and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered through Cloudflare, Inc. and hosted on an IP located in Canada.

This phishing operation aimed to deceive users by mimicking the branding and interface of OKX, a popular cryptocurrency platform. The domain's quick detection and subsequent takedown highlight the effectiveness of early threat identification. However, the fact that it was flagged by only a few vendors underscores the importance of rapid response to newly registered domains, as phishing sites often exploit the time lag before they are widely recognized as threats.

The domain was registered and first detected on April 3, 2026, and had a platform risk score of 68 out of 100. The SSL certificate was issued by Google Trust Services, which is not uncommon for malicious sites attempting to appear legitimate. The swift action to list the domain on multiple blocklists and its subsequent takedown reflects coordinated efforts to mitigate the risk posed by such scams. The case of dogevercetoken.pages.dev serves as a reminder of the persistent threat of phishing attacks in the cryptocurrency sector.