cbyershoke[.]com

The domain cbyershoke.com has been identified as a brand impersonation threat targeting the cryptocurrency exchange OKX. This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and does not appear to be associated with any known drainer kits or advanced malware. The primary concern is the use of this domain to deceive users into believing they are interacting with a legitimate OKX service, potentially leading to financial loss or the theft of sensitive information.

Technical analysis reveals that cbyershoke.com resolves to the IP address 172.67.201.62. The domain was created on March 27, 2026. According to VirusTotal, 2 out of 95 security vendors have flagged this domain as malicious. The domain also appears in 1 threat intelligence pulse on AlienVault OTX and is listed on 1 security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trust. Additionally, the domain has been taken offline, which may suggest that it was part of a temporary campaign or that it was shut down due to security measures.

As of the latest assessment, cbyershoke.com is currently offline. Despite this, the domain remains a potential risk due to its past association with brand impersonation and the presence of security flags. Users are advised to avoid any links or communications related to this domain and to report any suspicious activity to their security teams. Security professionals should monitor for any reactivation of the domain and take appropriate actions to mitigate the threat. The elevated risk level indicates that the domain has a high potential for causing harm if it is brought back online.