# cybekshoke.com — SUSPICIOUS

> cybekshoke.com impersonates OKX in a brand impersonation threat. Active since April 2025, flagged by 1 of 95 VirusTotal vendors. Verify safety on PhishDestroy.

## Summary
The domain cybekshoke.com has been identified as an active threat involving brand impersonation targeting the cryptocurrency platform OKX. This fraudulent domain mimics OKX with the intent to deceive users, potentially leading to compromised accounts or financial loss. PhishDestroy has classified this domain as elevated risk due to its impersonation tactics and ongoing activity.

Technical analysis reveals that cybekshoke.com was registered recently on April 06, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.4.153 and uses an SSL certificate issued by Google Trust Services, which may lend it unwarranted credibility. VirusTotal scans indicate that 1 out of 95 security vendors currently flags this domain, suggesting low but notable detection. While only a single flag, the domain’s connection with brand impersonation significantly raises its threat profile given the potential for user exploitation. No additional blocklist counts were found at this time.

Currently, cybekshoke.com remains active and poses a significant risk to those attempting to access genuine OKX services. Users are strongly advised to verify the authenticity of URLs and avoid entering sensitive credentials on this domain. Security teams should consider blocking the IP 104.21.4.153 and monitoring for any related communications. Continuous vigilance and use of verification tools like PhishDestroy are recommended to mitigate exposure to this and similar brand impersonation domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2025-04-06 23:33:17
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.4.153

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bd03464f-eeba-46fa-b3e3-6b4e5e8db28e
- PhishDestroy: https://phishdestroy.io/domain/cybekshoke.com/
- LLM endpoint: https://phishdestroy.io/domain/cybekshoke.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cybekshoke.com/
Last updated: 2026-03-25