tokenpockte[.]pro

This domain, tokenpockte.pro, is flagged as a high-risk brand impersonation targeting the cryptocurrency exchange OKX. The domain is currently active and operational, with a page title that reads 'Tokenpocket-您的安全加密钱包，探索区块链', which translates to 'Tokenpocket-Your Secure Cryptocurrency Wallet, Explore Blockchain'. This suggests the site is attempting to mimic a legitimate cryptocurrency wallet service, potentially to deceive users into divulging sensitive information or performing unauthorized transactions. The domain is hosted on Cloudflare's infrastructure, with nameservers 'gina.ns.cloudflare.com' and 'langston.ns.cloudflare.com', and resolves to the IP address 172.67.148.250, located in the United States. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. Despite the use of reputable technologies such as Ant Design, scrollreveal, and HSTS, the domain's trust score from Gridinsoft is 0/100, indicating a significant risk. Furthermore, the domain appears on one known security blocklist, PhishDestroy, and is flagged by 9 out of 95 security vendors on VirusTotal, suggesting that it has been identified as malicious by a portion of the security community. Defenders should be cautious and consider blocking this domain to prevent potential financial and data loss. The exact content and functionality of the site have not been fully analyzed, but the available data strongly suggests that it is a high-risk domain designed to impersonate the OKX brand. Given the active status and the presence of multiple technical indicators, immediate action is recommended to mitigate the risk of users being compromised.