maxxingtoken[.]lat

The domain maxxingtoken.lat is a confirmed phishing site engaged in brand impersonation targeting OKX, a cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate OKX platform, posing an elevated risk of credential theft or fraudulent transactions. As of the latest verification, maxxingtoken.lat has been taken offline, though it previously operated as an active scam site.

Technical indicators confirm the malicious nature of maxxingtoken.lat. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 22, 2026, and resolved to the IP address 172.67.156.36, hosted on Cloudflare’s infrastructure (AS13335). The SSL certificate was issued by Let’s Encrypt (E7), and the observed page title was 'Even geduld...'. The site employed Cloudflare and HTTP/3 technologies, further obscuring its operations.

Users who interacted with maxxingtoken.lat should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to mitigate potential losses. If credentials were entered, change passwords for OKX and any other accounts using the same credentials, and enable two-factor authentication. Report the domain to OKX’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.