tokentides[.]store

Tokentides.store impersonates the cryptocurrency platform OKX, designed to deceive users into sharing sensitive information. The domain has been flagged as malicious by 17 out of 92 vendors on VirusTotal, indicating a significant threat level. Additionally, it appears on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL, underscoring its malicious intent.

The domain was registered through Dynadot Inc and hosted on an IP address located in Germany, managed by HOSTINGER DE. Despite its offline status, the domain's previous activity highlights the persistent threat posed by phishing campaigns targeting cryptocurrency users. The website masqueraded as an NFT marketplace under the name "Tokentides," likely to lure victims into divulging their credentials or financial information.

Phishing domains like tokentides.store exploit the rapid pace of domain registration and the lag in antivirus database updates, making early detection crucial. PhishDestroy's proactive monitoring identifies such threats during the critical window before they are widely recognized by antivirus vendors. This approach helps mitigate risks associated with newly registered domains that could otherwise evade detection in their initial days of operation.