token2049-singapore[.]site

The domain token2049-singapapore.site is currently flagged as an active brand impersonation scam specifically targeting OKX, a prominent cryptocurrency exchange. Analysis indicates this infrastructure is designed to deceive users by mimicking the TOKEN2049 crypto event, leveraging the event's reputation to facilitate fraudulent activities. The threat type is classified as brand impersonation, with no evidence of credential theft or crypto drainer functionality at this stage, though further investigation is warranted. Infrastructure analysis reveals the domain was registered on July 06, 2026, through Registrar of Domain Names REG.RU LLC. It resolves to the IP address 89.124.82.37 and employs a Let's Encrypt SSL certificate, which provides a superficial layer of legitimacy. The domain has been flagged by 1 of 95 security vendors on VirusTotal, indicating limited but existing detection. The page title, TOKEN2049 | The World's Largest Crypto Event, aligns with the impersonation theme, further corroborating the malicious intent. No additional blocklist entries or trust scores were identified in the available data. The domain remains active as of the latest verification, posing a high risk to users who may mistake it for the legitimate TOKEN2049 event or OKX-affiliated promotions. Organizations and individuals are advised to block the domain at the network level and add it to internal threat intelligence feeds. Users should be educated to verify event URLs directly through official OKX or TOKEN2049 channels before engaging with any promotional content. Monitoring for associated IP addresses and SSL certificate patterns is recommended to identify potential pivot domains or infrastructure reuse.