tokenpocketweb3[.]cn

tokenpocketweb3.cn is a recently uncovered domain posing as the legitimate OKX cryptocurrency wallet service in order to trick users into entering their private keys or seed phrases. By closely mirroring the official OKX branding and user interface, this site lures visitors into handing over sensitive wallet credentials, which are then harvested by attackers for immediate fund extraction. This type of attack is known as a brand impersonation phishing scheme specifically targeting OKX users. PhishDestroy identifies this threat through multiple technical indicators collected on May 13, 2026. The domain was registered on May 10, 2026 via 阿里云计算有限公司（万网）, resolving to IP address 154.215.156.78 and secured with a Let’s Encrypt SSL certificate. Notably, VirusTotal currently shows 2 out of 95 detection engines flagging the domain as malicious, indicating it remains under the radar despite active abuse. This low detection rate highlights the deceptive nature of the site, which employs convincing visual replication to evade initial scrutiny. If you have visited tokenpocketweb3.cn or entered any wallet credentials on the site, cease all interaction immediately and transfer any remaining assets to a newly generated wallet from a trusted source. Revoke any exposed API keys or permissions tied to the compromised wallet and enable two-factor authentication on your OKX account if applicable. Report the domain to your local cybercrime unit and consider using a reputable password manager or security tool to scan for associated malware. Always verify website URLs manually or through official OKX channels before entering sensitive information.