spiketoken[.]lol

PhishDestroy identifies spiketoken.lol as an active brand impersonation scam targeting OKX cryptocurrency exchange users. The domain mimics OKX branding to deceive victims into connecting crypto wallets and signing malicious transactions under the guise of claiming a new 'SPIKE' token. While specific drainer kit signatures remain unverified, the site's infrastructure and social engineering tactics align with established crypto drainer operations. This domain was flagged by PhishDestroy with the unique seed identifier e5fda9. Technical indicators include a VirusTotal detection rate of 2/95 engines, registration via PDR Ltd. d/b/a PublicDomainRegistry.com, an IP resolution of 188.114.96.3, a domain creation date of April 24, 2026, and a valid Let’s Encrypt SSL certificate. As of this analysis, the domain remains unblocked by Google Safe Browsing and has not been flagged on major threat intelligence blocklists. The campaign is currently active and poses a critical risk to crypto traders seeking new investment opportunities. Users are advised to avoid interacting with spiketoken.lol entirely and to verify all token claims through official OKX channels. Immediate reporting to OKX support and crypto security platforms is recommended to mitigate potential losses. Remaining risk is assessed as high due to low detection rates and the irreversible nature of crypto transactions.