tokenpocket[.]cn

The domain tokenpocket.cn is assessed as having an elevated risk level due to its specific threat type of brand impersonation, targeting the cryptocurrency exchange OKX. This domain poses a significant risk to users who may be misled into providing sensitive information or credentials, leading to potential financial loss and data compromise.

Infrastructure analysis reveals that tokenpocket.cn currently resolves to the IP address 203.168.129.149, which is located in Singapore and is associated with Dream Cloud Innovation Pte. LTD. The domain was created on March 26, 2026, and is registered through Web Commerce Communications Limited. Analysis indicates that the domain appears on one security blocklist and is specifically blocked by PhishDestroy. VirusTotal reports that 11 out of 95 security vendors flag this domain as malicious, suggesting a moderate level of consensus regarding its malicious nature. The SSL certificate is issued by Let's Encrypt, which is a common practice for phishing sites to appear more legitimate.

To mitigate the risks associated with brand impersonation, users are advised to verify the authenticity of any communications or web pages claiming to be from OKX. This can be done by cross-referencing URLs and SSL certificates with official OKX resources. Additionally, implementing multi-factor authentication (MFA) for OKX accounts can significantly reduce the likelihood of unauthorized access even if credentials are compromised. Network administrators should consider blocking access to this domain at the firewall level and educating users about the dangers of brand impersonation attacks.