cybetshoke[.]com

This domain is flagged as a brand impersonation threat with an elevated risk level, specifically targeting OKX, a cryptocurrency exchange platform. The domain cybetshoke.com mimics legitimate services to deceive users into disclosing sensitive information or transferring assets under false pretenses. Analysis indicates the page title displayed as 'CYBERSHOKE – CS2 Servers (CSGO),' which may serve as a decoy to obscure its true malicious intent. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 172.67.169.142. It employs Cloudflare and HTTP/3, likely to obfuscate its origin and evade detection. Security assessments show a Gridinsoft trust score of 0/100, and VirusTotal reports 2/95 security vendors flagging it as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Despite its current offline status, historical data confirms its use in fraudulent activities. Mitigation steps for this threat include blocking the domain and its associated IP (172.67.169.142) at the network perimeter. Organizations should update security blocklists to include cybetshoke.com and monitor for any attempts to re-register or re-host the domain. Users should be educated on recognizing brand impersonation tactics, particularly those involving cryptocurrency platforms. If the domain reappears, security teams should conduct a forensic analysis to determine the extent of its reach and potential compromise of credentials or financial data.