# cybercsshoke.com — SUSPICIOUS

> Stay vigilant against cybercsshoke.com, a domain impersonating OKX. Avoid interaction and report suspicious activity to protect your security.

## Summary
PhishDestroy has identified cybercsshoke.com as a medium-risk threat specializing in brand impersonation of the cryptocurrency platform OKX. Although not the most aggressive threat, this domain's intent to deceive users by mimicking a trusted brand poses a notable risk to consumers and investors.

The domain cybercsshoke.com was registered recently on March 5, 2026, via NiceNIC International Group Co., Limited and resolved to the IP address 104.21.79.184. It carries the page title "CYBERSHOKE – CS2 Servers (CSGO)", which may attempt to mislead users into believing it is associated with gaming services, potentially masking its true malicious purpose. Despite a low trust score of 0/100 from Gridinsoft and its presence on one security blocklist, only 3 out of 95 security vendors flagged it on VirusTotal, suggesting limited but credible detection. Currently, the domain is offline, preventing active exploitation.

To mitigate any risks, users are strongly advised to avoid engaging with cybercsshoke.com or sharing personal details if encountered. Security teams should monitor for any resurgence of this domain or similarly named variants targeting OKX customers. PhishDestroy continues to track this domain’s status and recommends maintaining updated security solutions to defend against brand impersonation scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: OKX
- Page title: CYBERSHOKE – CS2 Servers (CSGO)

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.79.184
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: gerardo.ns.cloudflare.com,magdalena.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Bfore.Ai PreCrime", "Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf3a-0035-7132-b5b5-1dd3c16f02d8.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7d1f0015-6842-4ce3-a0e6-efeab6f06c4e
- Wayback Machine: https://web.archive.org/web/https://cybercsshoke.com
- PhishDestroy: https://phishdestroy.io/domain/cybercsshoke.com/
- LLM endpoint: https://phishdestroy.io/domain/cybercsshoke.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cybercsshoke.com/
Last updated: 2026-03-19