delegate[.]tokenlogic[.]xyz

PhishDestroy has identified delegate.tokenlogic.xyz as an active brand impersonation threat targeting OKX users. This malicious domain attempts to deceive visitors by masquerading as the legitimate OKX cryptocurrency exchange platform. Threat actors frequently leverage typosquatting and brand impersonation to harvest credentials or deploy malware, making this a critical security concern for cryptocurrency users. This domain was flagged on September 20, 2023, and currently shows no detections on VirusTotal (7/95), indicating it has not yet been widely recognized by security vendors. It resolves to IP address 76.76.21.61 and is registered through Go Daddy, LLC using a Let's Encrypt SSL certificate. The domain's recent creation date and clean threat intelligence suggest it may be part of an emerging campaign that could escalate quickly as more users encounter it. Users who visited delegate.tokenlogic.xyz should immediately check for suspicious account activity on OKX and other cryptocurrency platforms. Avoid entering any credentials or sensitive information on this domain. Clear browser cache and cookies associated with this site, and consider running a malware scan on any device that accessed this URL. Report the domain to your organization's security team and to OKX's fraud reporting channels. Monitor financial accounts closely for unauthorized transactions, as brand impersonation sites often aim to capture login credentials or payment information.