tokenport[.]live

The domain tokenport.live is currently under investigation for brand impersonation, specifically targeting the cryptocurrency exchange OKX. The domain is active and poses a significant risk of misleading users who may believe they are visiting a legitimate OKX site.

Analysis indicates that tokenport.live has been flagged by 0 out of 95 VirusTotal vendors, suggesting it has not yet been identified by mainstream security services. The domain uses a Let's Encrypt SSL certificate, which provides a secure connection but does not guarantee the legitimacy of the site. It is registered through OwnRegistrar, Inc., and resolves to the IP address 188.114.96.3. The domain was created on May 23, 2026. There are no known blocklist entries or trust scores at this time, which may indicate a recent or low-profile operation.

Given the current status of tokenport.live, it is recommended that security teams and users exercise caution when encountering this domain. Network administrators should consider adding the IP address 188.114.96.3 to their internal blocklists to prevent access. Users are advised to verify the URL and SSL certificate of any site claiming to be OKX, and to report any suspicious activity to the official OKX support. Further investigation into the domain's activities and potential connections to known threat actors is warranted to determine the full scope of the threat.