tokenpocket[.]boo
“TokenPocket - Your secure crypto”
The domain www.tokenpocket.boo presented a page titled "TokenPocket - Your secure crypto" and was flagged as a cryptocurrency scam impersonating the OKX brand. This site posed a threat by attempting to deceive users into believing it was a legitimate crypto wallet service, likely to steal credentials or funds.
Technical analysis reveals that the domain was flagged by 12 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, CyRadar, Ermes, and ESET. It is listed on 1 blocklist. The IP address is 104.21.35.207, hosted in Canada by Cloudflare, Inc. The domain was registered through Porkbun LLC on 2026-03-23. It uses a Let's Encrypt SSL certificate with serial E8. The nameservers are norm.ns.cloudflare.com and rosalie.ns.cloudflare.com.
The site is currently offline. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 73, indicating a high level of threat. The risk level is assessed as critical due to the impersonation of a legitimate brand and confirmed malicious detections.
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 sources · synchronized Aug 10, 2026
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of tokenpocket.boo · checked Mar 23, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive