rtxtoken[.]live

This domain, www.rtxtoken.live, poses a significant threat as an active brand impersonation site targeting the cryptocurrency exchange OKX. The site is designed to appear legitimate and may trick users into divulging sensitive information, such as login credentials, by mimicking the look and feel of the genuine OKX website.

Analysis indicates that www.rtxtoken.live has been flagged by 3 out of 95 security vendors on VirusTotal, suggesting a level of sophistication in its design and execution. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, which has a history of being associated with suspicious activities. Additionally, the site resolves to the IP address 64.29.17.1 and uses a Let's Encrypt SSL certificate, which is common among both legitimate and malicious sites. The presence of the page title 'Vercel Security Checkpoint' does not guarantee the site's safety and may be used to deceive users.

If a user has visited www.rtxtoken.live, they should immediately take steps to secure their accounts. This includes changing passwords for OKX and any other accounts where the same credentials were used. Users should also monitor their financial accounts for any unauthorized transactions and report any suspicious activity to their bank or financial institution. Furthermore, it is recommended to run a full system scan using reputable antivirus software to ensure that no malware was installed. For those who suspect they may have fallen victim to this impersonation, contacting OKX support directly through their official website is crucial to receive further guidance and assistance.