# cybemshoke.com — SUSPICIOUS

> cybemshoke.com detected impersonating OKX exchange. Flagged by 0 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies cybemshoke.com as an active domain engaged in brand impersonation targeting OKX, a leading cryptocurrency exchange platform.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious despite its deceptive nature. The site resolves to IP address 172.67.220.212 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 06, 2025. It operates with an SSL certificate issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. No blocklist entries were recorded at the time of analysis, further underscoring the importance of proactive monitoring.

Given the domain's recent creation, lack of detections, and clear intent to impersonate a major cryptocurrency brand, the risk of exploitation remains high. Users are advised to avoid interacting with this domain and report it to OKX's fraud prevention channels. Organizations should consider blocking cybemshoke.com at the network level and updating threat intelligence feeds to prevent potential phishing incidents. Continuous monitoring is recommended as the threat landscape evolves.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2025-04-06 23:30:18
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.220.212

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6761f307-309b-4349-93a4-7049440b8fbe
- PhishDestroy: https://phishdestroy.io/domain/cybemshoke.com/
- LLM endpoint: https://phishdestroy.io/domain/cybemshoke.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cybemshoke.com/
Last updated: 2026-03-27