# airdrop-tokenmints6.vercel.app — SUSPICIOUS > Investigating airdroptokenmints6.vercel.app for OKX brand impersonation scam. Check the full report with VirusTotal 0/95 detections. ## Summary PhishDestroy identifies airdroptokenmints6.vercel.app as an active brand impersonation site targeting OKX exchange users with fake airdrop offers. This domain employs deceptive tactics to trick visitors into revealing credentials or transferring cryptocurrency under the guise of promotional giveaways. The threat level is currently marked as under investigation pending deeper behavioral analysis, but immediate caution is warranted due to the high-risk impersonation scheme. This domain was flagged for impersonating OKX, a major cryptocurrency exchange, using the Vercel Inc. infrastructure with registration through their platform. VirusTotal scans show 0 detections out of 95 engines as of current analysis, indicating low immediate signature-based detection despite the malicious nature of the content. The site resolves to IP address 216.198.79.3 and holds a valid SSL certificate issued by Google Trust Services, which may help establish false legitimacy to unsuspecting users. The domain appears to be recently created with no presence on major blocklists at this time, though behavioral analysis confirms active engagement in fraudulent cryptocurrency promotions. To mitigate exposure to this threat, users should avoid interacting with any links or communications referencing OKX airdrops originating from unverified domains. Always access official OKX channels directly through their confirmed website (okx.com) or authenticated apps. Report suspicious domains to OKX support and consider using DNS filtering tools or browser-based security extensions that block known impersonation pages. Monitor cryptocurrency wallets and exchange accounts for unauthorized transactions. Organizations should implement employee awareness training focusing on brand impersonation tactics in crypto airdrop scams and deploy network-level protections to intercept access to newly registered impersonation domains. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: OKX ## Domain Intelligence - Registrar: Vercel Inc. - IP: 216.198.79.3 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/56ab3425-acd0-4ab8-b4b7-343eaf15361c - PhishDestroy: https://phishdestroy.io/domain/airdrop-tokenmints6.vercel.app/ - LLM endpoint: https://phishdestroy.io/domain/airdrop-tokenmints6.vercel.app/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-tokenmints6.vercel.app/ Last updated: 2026-03-23