tokenpocket-rewards[.]com

PhishDestroy identifies tokenpocket-rewards.com as a high-risk brand impersonation domain targeting OKX users. This site mimics OKX’s official rewards platform to harvest login credentials and personal data, posing a direct threat to cryptocurrency security. Given its recent registration and lack of detection, users must treat this domain with extreme caution to avoid financial loss or account compromise.

This domain was flagged for impersonating OKX with the specific threat of credential theft via fake reward campaigns. Technical indicators include a VirusTotal detection rate of 2/95, registration through Dominet (HK) Limited, a Let’s Encrypt SSL certificate, and resolution to IP 107.151.77.135. Created on October 16, 2025, the domain has not yet been added to public blocklists or threat intelligence feeds, indicating its novelty and low visibility among security tools.

To mitigate risk, users should avoid accessing tokenpocket-rewards.com entirely and verify all reward-related links directly through OKX’s official website or app. If interaction has already occurred, change OKX account passwords immediately and enable two-factor authentication. Report this domain to OKX’s fraud team and local cybersecurity authorities to aid in its takedown. Exercise heightened vigilance for unsolicited reward offers linking to this or similar domains.