brokeapt[.]com

Risk level is elevated for brokeapt.com, assessed as a brand impersonation infrastructure targeting the OKX platform. The domain exhibits characteristics consistent with deceptive identity spoofing intended to mislead users and potentially harvest sensitive credentials or financial access data.

Technical intelligence shows multiple corroborating indicators of malicious intent. VirusTotal analysis reports 19/95 security vendors flagging the domain as malicious. The domain is currently listed on 1 security blocklist and has been blocked by PhishDestroy. Infrastructure status indicates the site is offline at present, reducing active exposure but not eliminating underlying risk due to potential reactivation. The domain was registered through TUCOWS.COM, CO. and was created on June 13, 2026. It resolves to IP address 196.251.107.143. No SSL certificate is present, indicating lack of encrypted transport security. The hosted content displays the default Apache2 Ubuntu landing page titled 'Apache2 Ubuntu Default Page: It works', suggesting misconfigured or repurposed hosting often associated with staging or rapidly deployed phishing infrastructure. The domain explicitly impersonates OKX, a known financial service target for credential theft campaigns.

Mitigation analysis indicates that despite its current offline status, the infrastructure should be treated as high-risk due to prior detection and brand impersonation intent. Users should avoid interacting with any historical or mirrored versions of the domain, as reactivation or clone deployment could occur on the same IP or registrar infrastructure. Security teams should maintain blocklisting for brokeapt.com, monitor 196.251.107.143 for related hostnames, and enforce domain-based filtering given absence of SSL and prior phishing classification signals. Continued monitoring of VirusTotal ratios and registrar abuse patterns is recommended to detect potential re-registration or campaign relaunch activity.