okx-pinet[.]com

The domain okx-pinet.com is a confirmed phishing site engaged in brand impersonation targeting OKX, a major cryptocurrency exchange. It presents itself as a legitimate OKX-related service but is designed to deceive users into disclosing sensitive information or transferring cryptocurrency under false pretenses. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, okx-pinet.com has been taken offline.

Technical indicators confirm the malicious nature of okx-pinet.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. It appears on 1 security blocklist, specifically PhishDestroy, though Google Safe Browsing has not flagged it. Registered through P.A. Viet Nam Company Limited on April 7, 2025, the domain resolves to the IP address 104.21.96.1, hosted by Cloudflare in the US. The SSL certificate is issued by WE1, and the observed page title was 'Pi network'.

Users who interacted with okx-pinet.com should immediately change any passwords or credentials entered on the site and enable two-factor authentication (2FA) on their OKX and other cryptocurrency accounts. Monitor accounts for unauthorized transactions and report any suspicious activity to the legitimate platform. To mitigate further risk, revoke any token approvals granted to unknown or suspicious addresses using tools like Etherscan or BscScan. Report the phishing domain to OKX’s official security team and submit it to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to help prevent further victimization.