cybezshoke[.]com

PhishDestroy has identified cybezshoke.com as a brand impersonation phishing domain targeting the OKX cryptocurrency exchange. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, and resolves to IP 188.114.96.3. Despite its page title referencing "CYBERSHOKE – CS2 Servers (CSGO)", the domain is designed to deceive users into believing it is associated with OKX, likely to harvest credentials or sensitive information.

Technical analysis reveals that 9 out of 95 security vendors on VirusTotal flag this domain as malicious. It appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1). Although the domain is currently offline, its presence in one AlienVault OTX threat intelligence pulse indicates that it was actively monitored by security researchers. The domain was created less than a year ago, which is a common trait among phishing sites.

As of the latest check, cybezshoke.com has been taken offline, but the risk of similar domains emerging remains. Users who may have interacted with this domain should immediately change their OKX credentials and enable two-factor authentication. PhishDestroy recommends remaining vigilant against unexpected communications claiming to be from OKX and verifying URLs before entering any personal information.