mining-okb[.]com

This domain, mining-okb.com, is flagged for high-risk brand impersonation targeting Trust Wallet users. Analysis indicates the site presents itself as an official mining pool under the title '【New message】OKBMining-Official Mining Pool,' a common tactic to deceive cryptocurrency holders into disclosing credentials or transferring assets. No explicit drainer kit signatures have been identified, but the infrastructure aligns with known phishing campaigns exploiting decentralized finance (DeFi) platforms. Infrastructure analysis reveals the domain was registered on September 03, 2025, through Dominet (HK) Limited, a registrar frequently associated with malicious registrations. It resolves to the IP address 104.21.64.1, hosted on Cloudflare’s network (AS13335), which is often leveraged to obfuscate attacker infrastructure. VirusTotal reports 10 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain lacks an SSL certificate, further reducing its legitimacy. No entries were found in Google Safe Browsing at the time of analysis. As of the latest assessment, mining-okb.com remains active and unmitigated, posing a continued risk to users. The absence of SSL and reliance on Cloudflare’s IP space suggest an attempt to evade detection while maintaining operational uptime. Users are advised to treat any interaction with this domain as malicious and avoid entering credentials or connecting wallets. Organizations should update blocklists to include this domain and its resolving IP, while monitoring for related infrastructure registered under the same registrar or hosting provider.