# cyberskhoke.com — MALICIOUS

> cyberskhoke.com is an active brand impersonation domain targeting OKX users. Created March 27, 2025, avoid this phishing site!

## Summary
PhishDestroy identifies cyberskhoke.com as a malicious domain actively engaged in brand impersonation, specifically targeting users of the OKX cryptocurrency exchange. This poses a significant risk to individuals who may be tricked into entering their credentials or private keys on the fraudulent website, leading to potential financial losses and account compromise. The domain attempts to mimic the official OKX website to deceive unsuspecting visitors.  

Evidence of malicious activity includes a VirusTotal detection ratio of 6/95, indicating that multiple security vendors recognize the domain as a threat. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2025. The domain resolves to IP address 188.114.96.3. The SSL certificate was issued by Google Trust Services which does not necessarily indicate safety, as malicious actors often utilize legitimate certificates to appear trustworthy.  

Users who have visited cyberskhoke.com are strongly advised to immediately change their OKX passwords and enable two-factor authentication for enhanced security. It is crucial to carefully review recent OKX transaction history for any unauthorized activity and report any suspicious transactions to OKX support. Exercise extreme caution when clicking on links or entering personal information, and always verify the authenticity of a website before providing sensitive data. It is recommended to utilize a reputable anti-malware solution to scan your system for potential malware infections.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2025-03-27 13:18:22
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/aee24a87-9f41-40b3-8389-2a3cf861f5e1
- PhishDestroy: https://phishdestroy.io/domain/cyberskhoke.com/
- LLM endpoint: https://phishdestroy.io/domain/cyberskhoke.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cyberskhoke.com/
Last updated: 2026-03-27