okxdrainer[.]pages[.]dev
Pemeriksaan phishing dan keamanan okxdrainer.pages.dev
“Worker threw exception | okxdrainer.pages.dev | Cloudflare”
okxdrainer.pages.dev — Kesalahan server (HTTP 500). Peniruan identitas merek: OKX; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 1/91 (alphaMountain.ai); PhishDestroy score 76/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On 12 July 2026 the domain okxdrainer.pages.dev was identified as a high‑risk brand‑impersonation site targeting the cryptocurrency exchange OKX. The domain, created on 12 May 2025, resolves to the IP address 172.66.44.236 and serves a TLS certificate issued by Google Trust Services under the WE1 root. An HTTP request to the site returns a 500 status code and the page title “Worker threw exception | okxdrainer.pages.dev | Cloudflare”, indicating a failing Cloudflare worker.
The hosting infrastructure is provided entirely by Cloudflare, Inc. The domain uses the authoritative nameservers kenia.ns.cloudflare.com and apollo.ns.cloudflare.com and is assigned to ASN 13335, located in the United States. Detected technologies include HTTP/3 and HTTP Strict Transport Security (HSTS). Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed on a single security blocklist operated by PhishDestroy.
VirusTotal analysis shows that 1 of 95 security vendors flagged the domain, reflecting limited detection coverage but not mitigating the evident threat. The site’s content is classified as a cryptocurrency‑related scam, consistent with the brand‑impersonation technique used to lure victims into fraudulent financial interactions. No additional malicious payloads have been observed, leaving the exact exploitation method uncertain.
Defenders should immediately block okxdrainer.pages.dev at network and endpoint layers, and add the associated IP address 172.66.44.236 to deny lists. Continuous monitoring of DNS queries for this domain and its Cloudflare nameservers is advised. User education campaigns should warn personnel about counterfeit OKX communications and recommend verification of URLs before any credential or crypto‑transfer submission.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive