otpku[.]com

PhishDestroy identifies otpku.com as a live crypto-credential theft site posing under the guise of an OTP login page. Once victims land on this counterfeit login portal, any credentials entered are immediately harvested by the attackers. The domain’s fast flux behavior and short-lived hosting pattern make it a high-risk trap for users expecting legitimate two-factor authentication flows.

This domain was flagged on July 31, 2021, and currently resolves to the IP address 188.114.96.3 under a Google Trust Services SSL certificate—an unusual configuration for brand-impersonation lures. VirusTotal’s latest scan shows 4 out of 95 security engines detected the threat at the time of analysis, underscoring the site’s ability to evade traditional antivirus checks. The domain was registered through CV. Rumahweb Indonesia, a registrar often abused for low-cost cybercrime infrastructure.

If you visited otpku.com, do not enter any passwords, two-factor codes, or wallet recovery phrases. Close the tab immediately and run a full malware scan on your device. Report any suspicious transaction activity to your wallet provider and consider revoking connected app permissions using tools like etherscan.io for Ethereum-based wallets. Always verify website URLs via official channels before submitting sensitive information.