littlepepetokens[.]live

This domain poses a brand impersonation threat targeting OKX users through a fake interface designed to capture credentials or initiate unauthorized transactions. The page title Nur einen Moment… combined with Cloudflare and HTTP/3 technologies indicates a deliberately configured landing point intended to mimic legitimate exchange workflows while remaining difficult to trace.

Infrastructure analysis reveals the domain is registered through OwnRegistrar, Inc., appears on 1 security blocklist, and carries a VirusTotal detection rate of 3/95. It resolves to IP 188.114.96.3, employs an SSL certificate issued by Google Trust Services, and activates HSTS along with Cloudflare Browser Insights. Current status is offline yet the registration and certificate remain active, preserving the potential for rapid redeployment.

Users who visited the domain should immediately change OKX account passwords from a clean device, enable or verify two-factor authentication, and review recent login and withdrawal history for anomalies. Network logs should be examined for connections to 188.114.96.3, and any entered credentials must be treated as compromised. Continued monitoring of associated email accounts for phishing follow-up messages is advised.