# airdrop-tokenmints9.vercel.app — SUSPICIOUS > Discover why airdrop-tokenmints9.vercel.app is a brand impersonation threat impersonating OKX, flagged by 4 of 95 VirusTotal vendors. Act now to block this risk. ## Summary PhishDestroy identifies airdrop-tokenmints9.vercel.app as an active brand impersonation domain designed to mimic OKX, posing an elevated threat to cryptocurrency users seeking airdrops. This malicious domain, registered via Vercel Inc. on an unspecified date, leverages a Google Trust Services SSL certificate to appear legitimate while resolving to IP address 216.198.79.67. Intelligence shows it has been flagged by 4 of 95 VirusTotal vendors, indicating early-stage but confirmed malicious activity targeting unsuspecting victims. Given its active status and confirmed impersonation of a major exchange, organizations and individuals should immediately block the domain at the network and DNS levels. Users interacting with cryptocurrency platforms should verify URLs through official channels and avoid clicking unverified links. Continuous monitoring of this domain and associated IPs is recommended to prevent credential theft or crypto drainer attacks. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: OKX ## Domain Intelligence - Registrar: Vercel Inc. - IP: 216.198.79.67 ## Detection Status - VirusTotal: 4 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/3c0ff51f-d18c-4ed6-9c11-cbd462e7587a - PhishDestroy: https://phishdestroy.io/domain/airdrop-tokenmints9.vercel.app/ - LLM endpoint: https://phishdestroy.io/domain/airdrop-tokenmints9.vercel.app/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-tokenmints9.vercel.app/ Last updated: 2026-03-23