snortertokendapp[.]pages[.]dev

PhishDestroy identifies snortertokendapp.pages.dev as a live brand-impersonation page masquerading as OKX’s token launch interface. This Cloudflare Pages deployment (registered via Cloudflare, Inc.) resolves to 172.66.44.86 and currently carries a clean VirusTotal score of 0 detections out of 95 engines, indicating it remains undetected by most scanners. The domain is still under active analysis and is presently flagged as an active threat. This domain was flagged by PhishDestroy for mimicking OKX to trick users into connecting crypto wallets and signing malicious permit or transfer messages that drain tokens. The infrastructure relies on Cloudflare’s Pages service to host the spoofed frontend and Google Trust Services for an SSL certificate, lending it a veneer of legitimacy. At the time of analysis, VirusTotal returned 0/95 detections, zero public blocklist hits, and no reverse-DNS entries, showing how new and stealthy the campaign is. Without proactive detection, users risk unknowingly authorizing malicious transactions simply by visiting the page. If you visited snortertokendapp.pages.dev, disconnect your wallet immediately using your wallet’s revoke feature or by visiting a reputable block explorer like Etherscan to check recent token approvals. Revoke any suspicious permissions for contracts you do not recognize, especially those granting unlimited token transfers. Report the domain to PhishDestroy to accelerate takedown and share any wallet transaction hashes (txids) so analysts can trace stolen funds. Stay vigilant: always navigate to OKX’s official site via verified bookmarks and verify every URL before entering credentials or signing messages.