okex[.]capital

okex.capital is a recently activated domain posing as OKX, the global cryptocurrency exchange. Our telemetry reveals it functions as a cryptocurrency drainer, surreptitiously siphoning deposited assets to attacker-controlled wallets under the guise of a legitimate login or deposit portal. Victims who enter their credentials or send funds to the addresses embedded on the fraudulent pages suffer irreversible losses, as blockchain transactions cannot be reversed. The site’s deceptive resemblance to the official okx.com platform is designed to exploit user trust and harvest sensitive wallet information or direct crypto transfers. Early analysis suggests these attacks are manual rather than automated, increasing the chance that the actors behind okex.capital are still iterating on their phishing kit to evade detection. This domain was flagged by PhishDestroy using seed 91a878. Technical indicators include registration through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 12, 2026, and resolution to IP 104.21.29.180. The site leverages a Let’s Encrypt SSL certificate for a veneer of legitimacy despite hosting overtly malicious content. VirusTotal currently shows zero detection out of 95 scanners, indicating the campaign has yet to be widely blocked by antivirus engines. Domain age and registrar choice are consistent with a short-lived campaign aimed at capitalizing on new or inattentive users who do not cross-verify URLs against known official domains. If you visited okex.capital or entered any information, immediately revoke wallet access for any connected applications, transfer remaining assets to a fresh wallet with a new seed phrase, and report the incident to OKX’s fraud team and your local cybercrime unit. Use a hardware wallet for future transactions and avoid clicking links in unsolicited messages. Check domain age with a tool like crt.sh or whois to spot recently registered impostors. Finally, bookmark the authentic OKX URL and use it exclusively for all transactions to prevent future exposure.