airdrop-tokenmints5[.]vercel[.]app

The domain airdrop-tokenmints5.vercel.app is currently active and identified as a brand impersonation threat targeting OKX, a cryptocurrency exchange platform. This infrastructure is designed to deceive users into believing they are interacting with legitimate OKX services, likely for credential harvesting or fraudulent asset transfers. Analysis indicates the domain remains operational and poses a high risk to unsuspecting users. Infrastructure analysis reveals the domain was registered through Vercel Inc. on March 23, 2026, and resolves to the IP address 64.29.17.67, located in the United States under Vercel, Inc. The SSL certificate is issued by Google Trust Services (WR1), a common characteristic of both legitimate and malicious services. Security vendor detections on VirusTotal indicate that 11 of 95 vendors flag this domain as malicious, while it appears on three security blocklists. Additional protective measures include blocking by PhishDestroy, MetaMask, and SEAL, further corroborating its malicious intent. Current status confirms the domain remains active, with no takedown or mitigation efforts observed as of this report. Organizations and individuals are advised to block this domain at the network level and update endpoint protection rules to prevent access. Users should be educated on recognizing brand impersonation tactics, particularly in cryptocurrency-related communications. Monitoring for similar domains using the same registrar or hosting provider is recommended to identify potential follow-up campaigns.