tokencheck[.]site

The domain tokencheck.site was registered on April 02, 2026 through GoDaddy.com, LLC and is served by the authoritative name servers ns41.domaincontrol.com and ns42.domaincontrol.com. It resolves to the IPv4 address 77.245.76.110, which is geolocated to Great Britain and listed as belonging to Redstation Limited. The domain is currently active and returns HTTP status code 200. Infrastructure analysis shows the host is present on one public blocklist and has been explicitly blocked by the PhishDestroy feed. The same IP appears in a single AlienVault OTX pulse, indicating prior observation by threat‑intel communities. The SSL certificate is a Let’s Encrypt R12 issuance, confirming the site is reachable over HTTPS. The page title reported as “BEP Verify – N2” and the campaign is classified as a “Fake Exchange” that impersonates the OK X brand. Detection metrics are limited; Gridinsoft assigns a trust score of 0 out of 100, while VirusTotal currently reports 0 detections out of 95 scans, a result that does not confirm safety nor maliciousness. No additional artefacts such as malicious payloads, command‑and‑control endpoints, or credential‑harvesting forms have been disclosed, leaving the exact phishing workflow unverified. Defenders should consider pre‑emptively blocking tokencheck.site and its resolving IP 77.245.76.110 at network perimeter devices and updating endpoint filtering rules. Continuous monitoring of the associated nameservers and any future sightings in blocklists or threat‑intel pulses is advised. Organizations that use OK X services should educate users about unsolicited verification requests and enforce multi‑factor authentication to mitigate credential compromise.