token-antix-inn[.]pages[.]dev

PhishDestroy identifies token-antix-inn.pages.dev as a brand impersonation phishing domain targeting OKX, a cryptocurrency exchange. The domain was designed to deceive users into believing they were visiting an official OKX platform, likely to steal login credentials, API keys, or cryptocurrency assets. The site is now offline, but users who visited it may still be at risk.

Technical indicators: VirusTotal flagged the domain with 2 out of 95 security vendors (approx. 2.1%) detecting malicious activity. The domain was registered through Cloudflare Pages, a common hosting service for rapid deployment, and resolves to IP address 172.66.44.140. The SSL certificate was issued by Google Trust Services / WE1, which is legitimate but does not validate the site's ownership. The domain is currently offline, reducing immediate risk. No creation date or blocklist count was provided, but the elevated risk level suggests potential inclusion in security blocklists.

If any user interacted with token-antix-inn.pages.dev, they should immediately change their OKX account password and enable two-factor authentication (2FA). They should also check for unauthorized transactions or changes to their account settings. Additionally, run a full antivirus scan on their device to detect any malware. Report the domain to OKX support and to phishing databases like PhishTank to help protect others. Avoid entering any personal or financial information on sites that impersonate well-known brands.