# PhishDestroy domain threat record: ome-okx.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ome-okx.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/ome-okx.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 02:27:08 UTC
- Last availability or vendor check: 2026-10-23 10:36:17 UTC
- Stored record updated: 2026-10-23 18:22:13 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: OKX

## Stored infrastructure

- Observed IP address: 177.4.10.96
- Registrar in stored WHOIS data: Web Commerce Communications Limited
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-20 10:34:04 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16693-c886-776d-b19a-dff7abc79ed9/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ome-okx.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.ome-okx.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://ome-okx.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified ome-okx.com.cn as malicious because it impersonates the OKX cryptocurrency exchange. The recorded page title “欧易官网 - 欧易 OKX 交易所 | 数据与安全服务全景” and the use of OKX branding support that assessment. The domain was first observed by PhishDestroy on 2026-10-23 and returned an HTTP 200 response at that time.

How the scam works
In brand‑impersonation phishing, attackers recreate the look and language of a legitimate service to lure victims into submitting login credentials, wallet addresses, or approving transactions. The goal is to harvest account access or convince users to transfer funds to attacker‑controlled wallets.

Evidence
VirusTotal scanned the domain on 2026-10-23 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the same day and did not flag the URL. URLScan captured the site on 2026-10-23 and its engine verdicts labeled it malicious with a score of 100, categorising it as phishing and identifying the OKX brand. OTX listed two pulses referencing the domain, external blocklists MetaMask and SEAL also contain it, and PhishDestroy’s internal blocklist marks it as malicious.

Infrastructure
The domain resolved to IP 177.4.10.96, which was recorded as belonging to Hong Kong Communications International Co., Limited in Hong Kong. TLS was provided by LiteSSL RSA CA 2025, valid from 2026-10-20 to 2027-01-18, and the site presented an HSTS header. Recorded nameservers were a.share-dns.com and b.share-dns.net. The domain appeared newly registered with zero‑day age, and DNSSEC was not enabled.

What to do
Users should avoid entering OKX credentials or approving any wallet connections on this site; if credentials were entered, they should change passwords immediately. Organizations should block ome-okx.com.cn at the network perimeter, monitor logs for requests to 177.4.10.96, and add the domain to internal blocklists as suspicious.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16693-c886-776d-b19a-dff7abc79ed9/
Cloudflare Radar report: https://radar.cloudflare.com/scan/dac256f6-0c70-4364-8376-b3847c3201e7
Stored capture screenshot: https://i.ibb.co/ymJ7RvPx/1dcf13e7b5dc.png
Cloudflare Radar screenshot (2026-10-23T03:02:27Z): https://screenshots.phishdestroy.io/cf/dac256f6-0c70-4364-8376-b3847c3201e7.png
URLScan screenshot (2026-10-23T02:44:24Z): https://screenshots.phishdestroy.io/us/01a166a5-187d-717a-9b65-9f6c5b23219c.png
URLScan capture report: https://urlscan.io/result/01a166a5-187d-717a-9b65-9f6c5b23219c/
VirusTotal report: https://www.virustotal.com/gui/domain/ome-okx.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ome-okx.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 03:06:11 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/ymJ7RvPx/1dcf13e7b5dc.png
  Captured: 2026-10-23 02:27:08 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16693-c886-776d-b19a-dff7abc79ed9.png
  Captured: 2026-10-23 02:27:08 UTC
  Source report: https://urlscan.io/result/01a16693-c886-776d-b19a-dff7abc79ed9/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/dac256f6-0c70-4364-8376-b3847c3201e7.png
  Captured: 2026-10-23 03:02:27 UTC
  Source report: https://radar.cloudflare.com/scan/dac256f6-0c70-4364-8376-b3847c3201e7
  SHA-256: 1d81bd8a57344aae4c3f707419becb59fa55c844428243c3682c517d3f1979b5
- URLQuery: https://screenshots.phishdestroy.io/uq/e8581d02-170b-42f7-bb99-5b20fac706fd.png
  Source report: https://urlquery.net/report/e8581d02-170b-42f7-bb99-5b20fac706fd
  SHA-256: 94bdad9fdb8f87f25c8e4038b525c3029c4dd4ed7016ba95f6bb8e290ffa242e
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a166a5-187d-717a-9b65-9f6c5b23219c.png
  Captured: 2026-10-23 02:44:24 UTC
  Source report: https://urlscan.io/result/01a166a5-187d-717a-9b65-9f6c5b23219c/
  SHA-256: 4e53acee5fb54d8ab3831ac967f859895c3e2877bca742d84071eb567c977b6c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T03:05:23Z",
        "uuid": "01a16693-c886-776d-b19a-dff7abc79ed9",
        "scanned_at": "2026-10-23T02:25:30Z",
        "final_url": "https://ome-okx.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ome-okx.com.cn/",
                "from": "http://ome-okx.com.cn/",
                "status": 307
            }
        ],
        "ip": "177.4.10.96",
        "ips": [
            "177.4.10.96"
        ],
        "asns": [
            "140227"
        ],
        "countries": [
            "HK"
        ],
        "link_domains": [
            "www.toprvkxwhpm.com",
            "www.mitnpkwxvfr.net"
        ],
        "doc_hash": "2b36f0fcb61db6858250c3c13cff1c7670cefe651c575fc47527bd2c2eff62fd",
        "script_hashes": [
            "ae2610a8c5de7bb9a7894c408b6e1134fe621730e620490aad6b4765e02622ce"
        ],
        "tls": {
            "san": [
                "www.ome-okx.com.cn",
                "ome-okx.com.cn"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "LiteSSL RSA CA 2025",
            "subject": "www.ome-okx.com.cn",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T03:59:59Z",
            "valid_from": "2026-10-20T04:00:00Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 4,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "okx"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "OKX"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T03:05:25Z",
        "uuid": "dac256f6-0c70-4364-8376-b3847c3201e7",
        "scanned_at": "2026-10-23T03:02:27Z",
        "final_url": "https://ome-okx.com.cn/",
        "status": 200,
        "history": [
            {
                "url": "https://ome-okx.com.cn/",
                "status": 200
            }
        ],
        "dom_hash": "f1c9c5bdec94dea0fad56e4db8b1451f6e2f2155a9d85eb013607b7985cfb6db",
        "doc_hash": "2b36f0fcb61db6858250c3c13cff1c7670cefe651c575fc47527bd2c2eff62fd",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ome-okx.com.cn",
                "type": "A",
                "value": "177.4.10.96"
            }
        ],
        "dnssec_valid": false,
        "ip": "177.4.10.96",
        "whois": {
            "registrar": "Web Commerce Communications Limited",
            "created": "2026-10-20T12:34:04Z",
            "expires": "2027-10-20T12:34:04Z",
            "nameservers": [
                "a3.share-dns.com",
                "b3.share-dns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T03:01:29Z",
        "analysis_at": "2026-10-23T02:42:39Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 39
        },
        "reputation": 0,
        "first_seen": "2026-10-20T06:15:15Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "a.share-dns.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "177.4.10.96"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "master.share-dns.com",
                "value": "a.share-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "b.share-dns.net"
            }
        ],
        "dns_at": "2026-10-23T02:48:03Z",
        "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b",
        "cert": {
            "san": [
                "www.ome-okx.com.cn",
                "ome-okx.com.cn"
            ],
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "serial": "31e476274a603710bf135524ee78fdefb68328a4",
            "sha256": "70d6a37907561405f8597aad77019b94c274a90e49f9c33876712db41055226f",
            "subject": "www.ome-okx.com.cn",
            "valid_to": "2027-01-18T03:59:59Z",
            "valid_from": "2026-10-20T04:00:00Z"
        },
        "whois": {
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "a3.share-dns.com",
                "b3.share-dns.net"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T03:05:42Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ome-okx.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T02:29:22Z",
            "first": "2026-10-23T02:29:22Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 4592
        },
        "social_tags": {
            "title": "欧易官网 - 欧易 OKX 交易所 | 数据与安全服务全景",
            "author": "欧易 OKX",
            "ogType": "website",
            "robots": "index, follow",
            "ogImage": "assets/og-cover.svg",
            "ogTitle": "欧易官网 - 欧易 OKX 交易所 | 数据与安全服务全景",
            "keywords": "欧易官网,欧易,欧易 OKX,欧易交易所,行情数据,账户安全,平台能力",
            "ogSiteName": "欧易 OKX",
            "themeColor": "#0b0f0e",
            "description": "欧易官网 · 欧易 OKX 交易所平台能力全景：实时行情数据、多层账户安全体系与 7×24 小时服务支持，用可核查的数字说明平台每天如何运转。",
            "ogDescription": "欧易官网平台能力全景：数据、安全、服务三个维度，用可核查的数字说明平台如何运转。"
        },
        "trackers": {
            "requests": 3
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 396,
                "tls": 204,
                "wait": 399,
                "connect": 199,
                "download": 0
            },
            "response_ms": 1198
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 12782,
            "co2_grams": 0.0005,
            "cleaner_than": 66
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.53.25",
                    "host": "a.share-dns.com"
                },
                {
                    "ip": "162.159.27.88",
                    "host": "b.share-dns.net"
                }
            ],
            "zone": "ome-okx.com.cn"
        },
        "location": {
            "ip": "177.4.10.96",
            "asn": "140227",
            "org": "Hong Kong Communications International Co., Limited",
            "city": "Hong Kong",
            "country": "HK"
        },
        "ssl": {
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "subject": "www.ome-okx.com.cn"
        },
        "dns": {
            "A": [
                "177.4.10.96"
            ],
            "NS": [
                "a.share-dns.com",
                "b.share-dns.net"
            ],
            "SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1792474300, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "177.4.10.96",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ome-okx.com.cn"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Nginx",
                "HSTS",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.mitnpkwxvfr.net/zh-hans/join",
                "https://www.toprvkxwhpm.com/upgradeapp/android_ACE532512.apk"
            ],
            "external_count": 2,
            "internal_count": 5
        },
        "whois": {
            "registrar": "Web Commerce Communications Limited",
            "created": "2026-10-20T10:34:04Z",
            "expires": "2027-10-20T10:34:04Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "a3.share-dns.com",
                "b3.share-dns.net"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```