oku-best-rates-onchain[.]vercel[.]app

The domain oku-best-rates-onchain.vercel.app has been identified as a generic phishing threat, potentially targeting cryptocurrency users with claims of offering the best rates "onchain." This domain may be part of a broader phishing campaign aimed at deceiving users into providing sensitive information or engaging with harmful cryptocurrency transactions. There is no specific brand impersonation reported, nor is there evidence of a particular drainer kit being used.

Technical analysis reveals several indicators of malicious activity. The domain is flagged by 1 out of 95 security vendors on VirusTotal, suggesting initial recognition of its phishing nature. It is registered through Tucows Domains Inc., indicating a common registrar used in phishing schemes. The domain resolves to the IP address 216.198.79.67, located within the infrastructure of Amazon's AS16509. The domain was created on February 21, 2026, which may be an error in registration data, possibly pointing to fraudulent activity. The site is currently active and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL.

The current status of the domain is active, presenting a high risk to users who may encounter it. Immediate action is recommended to mitigate this threat, such as updating security blocklists and educating potential targets about the risks associated with interacting with such domains. Continuous monitoring for further activity and potential takedown actions should be considered to protect users from the ongoing threat this domain poses.