okx-rebate[.]dev[.]metawork[.]network

PhishDestroy identifies okx-rebate.dev.metawork.network as a brand-impersonation domain actively masquerading as OKX to harvest user data under the guise of rebate promotions. The site leverages a Let’s Encrypt SSL certificate for false legitimacy and is currently hosted on IP 18.143.140.208, but VirusTotal shows zero detections at this time, indicating it remains under the radar while active. This domain was flagged with brand_impersonation targeting OKX. VirusTotal recorded 2 out of 95 detection engines flagging the URL, the registrar remains unverified in public records, and no reliable creation date is listed, suggesting recent registration aimed at flying under detection thresholds. Despite the absence of AV detections, the combination of brand misuse, recent infrastructure, and lack of historical reputation forms a high-risk trap for unsuspecting users seeking OKX promotions. Any user who visited okx-rebate.dev.metawork.network should immediately revoke any entered credentials or payment details, scan local devices with updated antivirus software, and avoid further interaction with the domain. Report the URL to OKX support and your security team to aid in takedown efforts. Treat any unsolicited rebate link claiming to be from OKX with extreme caution and verify through official OKX channels before engagement.