# airdrop-tokenmints8.vercel.app — MALICIOUS

> PhishDestroy identifies airdrop-tokenmints8.vercel.app as an OKX impersonation scam hosted on Vercel, flagged by 5 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies airdrop-tokenmints8.vercel.app as an active brand-impersonation scam targeting OKX users by mimicking a free-token giveaway. The site lures victims with promises of “instant OKX airdrops” and then steals wallet credentials or deposits crypto directly. Once on the page, users are prompted to connect their wallets or enter seed phrases under the guise of verifying eligibility. Any data entered is immediately exfiltrated to attacker-controlled addresses, leading to drained wallets or sold NFT portfolios.  

This domain was flagged by 5 of 95 VirusTotal security vendors on day one. It resolves to Google Trust Services-validated IP 216.198.79.67 and is hosted on Vercel Inc., which does not verify the legitimacy of each deployment. The subdomain airdrop-tokenmints8.vercel.app was created minutes before scanning began, confirming its opportunistic nature rather than a long-running campaign. The choice of Vercel and Google’s SSL certificate makes the page appear technically legitimate at first glance, tricking cautious users who check HTTPS indicators.  

If you visited this page, immediately revoke wallet connections in your browser settings, export your transaction history, and transfer remaining assets to a fresh wallet generated offline. Change passwords only to sites you control; do not click any link received via email or social media claiming to be from OKX. Report the domain to your antivirus vendor or PhishDestroy for blocking updates, and warn other OKX users in your community.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 216.198.79.67

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/00e86168-8fad-4117-a54f-f7f7b36500c5
- PhishDestroy: https://phishdestroy.io/domain/airdrop-tokenmints8.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-tokenmints8.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-tokenmints8.vercel.app/
Last updated: 2026-03-23