MALICIOUS — CRITICAL
okk[.]link
PhishDestroy identifies OKK.LINK as a generic phishing domain posing as an all-in-one social tool, with no specific brand impersonation or drainer kit detected.
- VirusTotal
- 5/91
- Blocklists
- No stored match
- Disponibilité
- Dernier actif connu · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
okk.link — Dernier actif connu (HTTP 200). Résumé des preuves: VirusTotal 5/91 (ADMINUSLabs, alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); PhishDestroy score 83/100. Bureau d’enregistrement: Hosting Ukraine.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
PhishDestroy identifies OKK.LINK as a generic phishing domain posing as an all-in-one social tool, with no specific brand impersonation or drainer kit detected. The domain has a VirusTotal score of 5/95, was registered through Hosting Ukraine LLC, resolves to IP 159.69.129.231, and was created on April 28, 2026, currently listed on 1 security blocklist and holding a Let's Encrypt R13 SSL certificate.
This domain's technical indicators show a clear risk profile, with its IP and creation date suggesting a deliberate attempt to deceive users, while its blocklist count and VT score indicate a potential threat to users' credentials and crypto assets.
The current status of OKK.LINK is offline, but PhishDestroy notes that the domain still poses a remaining risk, and users are advised to remain vigilant and avoid interacting with any similar domains, as the threat actor may attempt to revive or recreate the domain to continue their malicious activities, emphasizing the need for continuous monitoring and awareness to prevent credential theft and crypto draining.
Couverture des données12 recorded checks
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of okk.link · checked Apr 29, 2026
Données factuelles et rapports externesIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.