claim[.]tokentable[.]xyz

The domain claim.tokentable.xyz is a phishing site engaged in brand impersonation targeting OKX, a cryptocurrency exchange. It operates as a cryptocurrency scam designed to deceive users into disclosing sensitive information or transferring digital assets under false pretenses. As of the latest verification, claim.tokentable.xyz has been taken offline, though it previously posed an elevated risk to users searching for legitimate OKX services.

Technical indicators confirm the malicious nature of claim.tokentable.xyz. The domain was flagged by 1 of 95 VirusTotal security vendors, specifically Forcepoint ThreatSeeker, and appears on 1 security blocklist (PhishDestroy). It was registered through Amazon Registrar, Inc. on April 6, 2023, and resolved to the IP address 13.33.67.108, hosted on Amazon Web Services within the US (AS16509). The SSL certificate was issued by Amazon RSA 2048 M01, and the observed page title was 'TokenTable'. Technologies detected include Amazon S3, Amazon CloudFront, and Google Analytics. Google Safe Browsing did not flag the domain, but Gridinsoft assigned it a trust score of 0/100.

Users who interacted with claim.tokentable.xyz should immediately change any passwords or credentials entered on the site and enable two-factor authentication (2FA) on their OKX and other cryptocurrency accounts. If cryptocurrency transactions were initiated, revoke any token approvals and consider transferring funds to a new wallet to mitigate potential losses. Report the domain to OKX’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.