# PhishDestroy domain threat record: ods-okx.com.cn Content language: English Canonical HTML report: https://phishdestroy.io/domain/ods-okx.com.cn/ Machine-readable companion: https://phishdestroy.io/domain/ods-okx.com.cn/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 22:41:38 UTC - Last availability or vendor check: 2026-10-22 10:42:09 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: OKX ## Stored infrastructure - Observed IP address: 177.4.10.59 - Registrar in stored WHOIS data: Web Commerce Communications Limited - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a15b78-f66e-7429-8d87-6884ca683fb5/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/ods-okx.com.cn - Certificate Transparency search: https://crt.sh/?q=%25.ods-okx.com.cn - Web Archive lookup: https://web.archive.org/web/*/https://ods-okx.com.cn/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated system classified ods-okx.com.cn as an impersonation phishing page. The page’s recorded title reads “欧易 OKX 资讯中心 - 欧易官网资讯平台 | 行情速览与行业动态”. PhishDestroy first observed the domain on 2026-10-21. How the scam works Impersonation phishing pages replicate the visual design and language of a legitimate brand—in this case OKX—to trick visitors into entering login credentials, API keys or other sensitive information. Harvested data can then be used to access victims’ exchange accounts or to conduct unauthorized transactions. Evidence A VirusTotal scan on 2026-10-21 using 92 engines returned 0 detections. Google Safe Browsing checked on the same date did not flag the URL. The domain appears on two external blocklists (MetaMask and SEAL) as of 2026-10-21, and PhishDestroy’s internal blocklist also includes it. OTX listed four pulses referencing the domain on 2026-10-21. Infrastructure The recorded IP address for ods-okx.com.cn is 177.4.10.59. No registrar or certificate details are available in the current evidence. What to do Do not enter any OKX credentials or API keys on this site. If you have already submitted such information, change your OKX password immediately and review account activity for unauthorized actions. Organizations should add ods-okx.com.cn to web filtering and intrusion detection rules and inspect logs for any connections to 177.4.10.59. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15b78-f66e-7429-8d87-6884ca683fb5/ VirusTotal report: https://www.virustotal.com/gui/domain/ods-okx.com.cn Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ods-okx.com.cn Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 23:12:53 UTC ## Stored page captures - Primary capture: https://i.ibb.co/nvQzdQG/7c65ed6dd568.png Captured: 2026-10-20 22:41:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15b78-f66e-7429-8d87-6884ca683fb5.png Captured: 2026-10-20 22:41:38 UTC Source report: https://urlscan.io/result/01a15b78-f66e-7429-8d87-6884ca683fb5/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/049d884b-cbec-4b83-8ec1-dbd776e95a53.png Captured: 2026-10-20 23:12:18 UTC Source report: https://radar.cloudflare.com/scan/049d884b-cbec-4b83-8ec1-dbd776e95a53 SHA-256: 637a5c0356c2f751f68f44dc4b588375fc484179ca3c7026b61a7eafe6cf8c86 - URLQuery: https://screenshots.phishdestroy.io/uq/51ee07ae-7b19-4c9b-bc65-aa328a05dec4.png Source report: https://urlquery.net/report/51ee07ae-7b19-4c9b-bc65-aa328a05dec4 SHA-256: ac0d154025817ace9cc3e3dc4762eca80a57979eb22acc58e408ea151f2db53f - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b80-86b4-73ae-8fa0-0276cce6dc0b.png Captured: 2026-10-20 22:48:40 UTC Source report: https://urlscan.io/result/01a15b80-86b4-73ae-8fa0-0276cce6dc0b/ SHA-256: 40c8ee8ff0336bfb038c56706b550e49d26d827e5b121e61f116db737e968c9d ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T00:10:08Z", "uuid": "01a15b78-f66e-7429-8d87-6884ca683fb5", "scanned_at": "2026-10-20T22:40:25Z", "final_url": "https://ods-okx.com.cn/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://ods-okx.com.cn/", "from": "http://ods-okx.com.cn/", "status": 307 } ], "ip": "177.4.10.59", "ips": [ "177.4.10.59" ], "asns": [ "140227" ], "countries": [ "HK" ], "link_domains": [ "www.toprvkxwhpm.com", "www.mitnpkwxvfr.net" ], "doc_hash": "dcb232205dbbd8021921487c108a060cce4cc8238817b1f9edc1bdeca3342e0e", "script_hashes": [ "5bd21512e02b6f8d8330dc12f1ae0a044d0067bb8cbe4c0ec1d8a533f849bf5a" ], "tls": { "san": [ "ods-okx.com.cn", "www.ods-okx.com.cn" ], "cipher": "AES_256_GCM", "issuer": "LiteSSL RSA CA 2025", "subject": "ods-okx.com.cn", "protocol": "TLS 1.3", "valid_to": "2027-01-18T06:59:59Z", "valid_from": "2026-10-20T07:00:00Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 0, "tls_valid_days": 89, "requests": 4, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "okx" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "OKX" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T00:21:17Z", "uuid": "049d884b-cbec-4b83-8ec1-dbd776e95a53", "scanned_at": "2026-10-20T23:12:18Z", "final_url": "https://ods-okx.com.cn/", "status": 200, "history": [ { "url": "https://ods-okx.com.cn/", "status": 200 } ], "dom_hash": "2c2b8f8af166c71bfd11bc8a846cf20a317dab41f285a7514353a65b9c3f1259", "doc_hash": "dcb232205dbbd8021921487c108a060cce4cc8238817b1f9edc1bdeca3342e0e", "domain_risks": [ "Newly Seen Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "ods-okx.com.cn", "type": "A", "value": "177.4.10.59" } ], "dnssec_valid": false, "ip": "177.4.10.59", "whois": { "registrar": "Web Commerce Communications Limited", "created": "2026-10-20T12:34:10Z", "expires": "2027-10-20T12:34:10Z", "nameservers": [ "a8.share-dns.com", "b8.share-dns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T00:08:27Z", "analysis_at": "2026-10-20T23:05:30Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "first_seen": "2026-10-20T05:31:21Z", "dns": [ { "ttl": 600, "type": "A", "value": "177.4.10.59" }, { "ttl": 600, "type": "SOA", "rname": "master.share-dns.com", "value": "a.share-dns.com" }, { "ttl": 21600, "type": "NS", "value": "b.share-dns.net" }, { "ttl": 21600, "type": "NS", "value": "a.share-dns.com" } ], "dns_at": "2026-10-20T23:10:49Z", "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "ods-okx.com.cn", "www.ods-okx.com.cn" ], "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025", "serial": "ff329159bfd7f8516a72cd71e2428798196afa4", "sha256": "9c9725d50229dda4bc03f2cba88d82ca1e2e37d5e8736e76519847cfc74159a7", "subject": "ods-okx.com.cn", "valid_to": "2027-01-18T06:59:59Z", "valid_from": "2026-10-20T07:00:00Z" }, "whois": { "status": [ "clientTransferProhibited" ], "nameservers": [ "a8.share-dns.com", "b8.share-dns.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T01:24:19Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "ods-okx.com.cn" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T22:44:00Z", "first": "2026-10-20T22:44:00Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 7534 }, "social_tags": { "title": "欧易 OKX 资讯中心 - 欧易官网资讯平台 | 行情速览与行业动态", "author": "欧易 OKX", "ogType": "website", "robots": "index, follow", "ogImage": "https://ods-okx.com.cn/assets/og-cover.svg", "ogTitle": "欧易 OKX 资讯中心 - 欧易官网资讯平台", "keywords": "欧易,欧易 OKX,欧易资讯中心,欧易官网,数字资产行情,行业观察,使用指南", "ogSiteName": "欧易 OKX", "themeColor": "#152a52", "description": "欧易 OKX 资讯中心官方入口,聚合平台动态、行业观察与实用操作指南,同步呈现比特币等主流数字资产实时行情,帮助关注欧易生态的每一位用户把握市场变化。", "ogDescription": "平台动态、行业观察与实用操作指南,同步呈现主流资产实时行情,欧易生态信息一站直达。" }, "trackers": { "requests": 3 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 68, "tls": 238, "wait": 395, "connect": 363, "download": 21 }, "response_ms": 1085 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 29589, "co2_grams": 0.0011, "cleaner_than": 48 }, "dns_server": { "ns": [ { "ip": "162.159.27.88", "host": "b.share-dns.net" }, { "ip": "172.64.53.25", "host": "a.share-dns.com" } ], "zone": "ods-okx.com.cn" }, "location": { "ip": "177.4.10.59", "asn": "140227", "org": "Hong Kong Communications International Co., Limited", "city": "Hong Kong", "country": "HK" }, "ssl": { "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025", "subject": "ods-okx.com.cn" }, "dns": { "A": [ "177.4.10.59" ], "NS": [ "b.share-dns.net", "a.share-dns.com" ], "SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1792471108, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "177.4.10.59", "family": 4 }, "redirects": { "chain": [ "https://ods-okx.com.cn" ] }, "subdomains": { "count": 2, "subdomains": [ "cn.ods-okx.com.cn", "www.ods-okx.com.cn" ] }, "tech_stack": { "technologies": [ "Nginx", "HSTS", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.toprvkxwhpm.com/upgradeapp/android_ACE532512.apk", "https://www.mitnpkwxvfr.net/zh-hans/join" ], "external_count": 2, "internal_count": 5 }, "whois": { "registrar": "Web Commerce Communications Limited", "created": "2026-10-20T10:34:10Z", "expires": "2027-10-20T10:34:10Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "a8.share-dns.com", "b8.share-dns.net" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```