spx6900-token[.]com

The domain spx6900-token.com poses a specific threat as a brand impersonation phishing site targeting OKX, a major cryptocurrency exchange. This domain was designed to deceive users into believing it was affiliated with OKX, likely aiming to steal login credentials, private keys, or cryptocurrency assets through fake wallet connections or information harvesting. The site was flagged and taken down, but its registration through CNOBIN INFORMATION TECHNOLOGY LIMITED on August 29, 2025, and hosting at IP 192.3.190.187 suggest a coordinated phishing campaign.

Technical indicators confirm the malicious nature of spx6900-token.com. VirusTotal analysis shows 1 out of 95 security vendors flagged the domain, indicating low but positive detection. The domain lacks an SSL certificate, a common red flag for phishing sites. It appears on one security blocklist, and the page title 'Account Suspended' suggests the site was disabled after detection. The registrar, CNOBIN INFORMATION TECHNOLOGY LIMITED, is known for hosting fraudulent domains, and the recent creation date aligns with typical phishing lifecycle patterns.

Users who visited spx6900-token.com should take immediate action: revoke any wallet permissions granted to the site, change passwords for OKX and other related accounts, enable two-factor authentication, and monitor accounts for unauthorized transactions. PhishDestroy strongly advises never interacting with unverified domains and always double-checking URLs before providing sensitive information. If funds were compromised, contact OKX support and consider reporting to relevant authorities.