web3-tokenpocket[.]com

PhishDestroy has flagged web3-tokenpocket.com as an active brand impersonation site specifically targeting OKX users with counterfeit token giveaways. The domain resolves to 160.124.196.141 and was registered on October 9, 2025 through Dominet (HK) Limited. Despite zero detections on VirusTotal, the site mimics OKX’s branding to trick visitors into connecting wallets or revealing credentials. Evidence supporting the threat includes the October 9, 2025 creation date, registration through Dominet (HK) Limited, a Let’s Encrypt SSL certificate, and 7/95 VirusTotal detections as of today. While the low detection rate suggests it may be newly launched or employing subtle tactics, the combination of recent registration, impersonation of a major exchange, and lack of widespread blocking signals elevated risk that warrants immediate caution. If you visited web3-tokenpocket.com, do not connect any wallets or enter credentials. Disconnect immediately, revoke any connected permissions via your wallet’s app or the exchange’s security dashboard, and run a malware scan on your device. Report the domain to your antivirus vendor and to OKX’s abuse team to aid in takedown efforts.