# okxecn.com — SUSPICIOUS

> Check if okxecn.com is a fake OKX phishing site. This domain was created in 2021 and flagged by 1 of 95 VirusTotal scanners. Check the full report.

## Summary
PhishDestroy identifies okxecn.com as an elevated-risk domain actively impersonating the OKX cryptocurrency exchange. This site is designed to trick visitors into believing they are on the legitimate OKX platform, potentially stealing login credentials or financial data. The threat is classified as brand impersonation phishing, where attackers leverage OKX’s trusted name to deceive users. If you encounter this domain, treat it as malicious and avoid entering any sensitive information.  

This domain was flagged by PhishDestroy with a unique seed identifier e38aab. Technical analysis shows okxecn.com was created on February 11, 2021, and is registered through Dynadot Inc. The site resolves to IP address 54.215.31.113 and uses a Let’s Encrypt SSL certificate to appear legitimate. VirusTotal’s scan detected only 1 out of 95 security vendors flagging this domain, highlighting how new or subtle phishing sites can evade detection. The combination of a recent creation date, obscure registrar, and low detection rate suggests this is a targeted attempt to exploit OKX users.  

If you visited okxecn.com, immediately cease any interaction and check your devices for malware or unauthorized access. Do not enter any login credentials, payment details, or personal information. Report the domain to OKX’s official support channels and your local cybersecurity agency. If you suspect your data was compromised, change passwords for all financial accounts and monitor for unusual activity. Always verify a website’s URL and SSL certificate before entering sensitive data to avoid falling victim to impersonation scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2021-02-11 20:06:19
- Registrar: Dynadot Inc
- IP: 54.215.31.113

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/79139d9a-06ea-4e25-a46b-640bc6c5367d
- PhishDestroy: https://phishdestroy.io/domain/okxecn.com/
- LLM endpoint: https://phishdestroy.io/domain/okxecn.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/okxecn.com/
Last updated: 2026-03-28