tokenpooket[.]co

Analysis indicates that tokenpooket.co is presently active and serves a page titled “404 Not Found” while returning HTTP status 200. The domain resolves to IP 104.21.27.242, which is hosted by Cloudflare, Inc. in Canada and presents a Let’s Encrypt certificate identified as YE2. The infrastructure has been flagged by multiple defensive products, including PhishDestroy, MetaMask, and SEAL, and appears on three external blocklists. AlienVault OTX references the domain in a single threat‑intel pulse, and VirusTotal records 16 of 91 scanners labeling the domain as malicious. These indicators collectively suggest the domain is being used in a generic phishing operation. No additional content details have been disclosed, and the exact payload or target brand remains unknown. Defenders should block the domain at network perimeter, monitor DNS queries for the host, and consider adding the associated IP address to deny lists. Ongoing observation is advised to capture any changes in content or hosting.