tokenpocket[.]cash
“TokenPocket - Your secure crypto”
Stored observation
Observed title contrast
Evidence Summary
The domain www.tokenpocket.cash presents a brand impersonation threat by pretending to be the legitimate cryptocurrency platform OKX. This tactic aims to deceive users into trusting the site, potentially leading to credential theft, financial loss, or unauthorized access to personal accounts. Users should be cautious when encountering sites that mimic well-known brands, especially in the crypto sector where scams are prevalent.
Evidence supporting this threat includes the domain resolving to IP address 154.215.101.171 and employing a Let's Encrypt SSL certificate, which may give a false sense of security. VirusTotal reports zero detections out of 95 antivirus engines, indicating the site is currently not flagged by most security tools but is still under investigation. The domain is actively impersonating OKX, a major cryptocurrency exchange, which raises significant concerns given the brand's high profile.
If you have visited www.tokenpocket.cash, it is critical to avoid entering any login credentials or personal information. Monitor your accounts associated with OKX for any suspicious activity and change your passwords immediately if you suspect compromise. Additionally, enable two-factor authentication on your crypto accounts to enhance security. Stay informed about official OKX communication channels and verify URLs carefully before interacting with any related service to prevent falling victim to such impersonation scams.
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
Domain status
Reachable → Unreachable
-
Domain status
Unreachable → Reachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of tokenpocket.cash · checked Mar 28, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive