buys-maxidogetoken[.]com

The domain buys-maxidogetoken.com has been identified as a brand impersonation threat specifically targeting OKX, a popular cryptocurrency exchange. This phishing domain was created on March 27, 2026, and is currently offline. It mimics the OKX brand to trick users into revealing their login credentials or private keys, potentially leading to cryptocurrency theft. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 172.67.221.239, which is associated with Cloudflare. According to VirusTotal, 2 out of 95 security vendors flagged this domain as malicious. It appears on 3 security blocklists and has a Let's Encrypt SSL certificate (E8). AlienVault OTX shows it is included in 1 threat intelligence pulse, indicating active monitoring by the security community.

PhishDestroy assesses this domain as an elevated risk due to its clear impersonation of a major cryptocurrency brand. Although the domain is currently offline, its infrastructure remains active and could be repurposed for future attacks. Users who may have interacted with this site should change their OKX passwords immediately and enable two-factor authentication. To stay safe, always verify URLs by checking the official OKX website directly, never click on unsolicited links, and use PhishDestroy's domain checker to vet suspicious domains before entering any sensitive information.