ccctxuh[.]cn

Analysis of the domain ccctxuh.cn indicates a confirmed cryptocurrency‑related impersonation campaign targeting the OKX brand. The domain was registered on February 21, 2026 and currently resolves to the IPv4 address 156.226.33.76, which is assigned to AS135097 LUOGELANG (FRANCE) LIMITED and geolocated to Hong Kong. The site’s page title, "欧 易APP官方下载app-引领数字资产交易新时代 - 欧 易下载," references the OKX brand and aligns with the reported scam type of a crypto scam.

Security monitoring services have flagged the domain, with 13 of 95 VirusTotal scanners labeling it malicious, and Gridinsoft assigning a trust score of zero out of one hundred, indicating extreme risk. The domain is listed on at least one external security blocklist and has been actively blocked by the PhishDestroy mitigation platform. The SSL certificate is rated R10, suggesting weak or no encryption, which is typical for malicious infrastructure.

Although the site is presently offline, its recent creation date, hosting characteristics, and multiple vendor detections suggest it was used in a short‑lived phishing operation designed to harvest credentials or funds from users seeking to access OKX services. Defenders should ensure that network perimeter controls block traffic to 156.226.33.76 and any future DNS resolutions for ccctxuh.cn, update URL filtering policies to include this domain, and monitor for related indicators such as similar page titles or the same hosting ASN. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or associated infrastructure, and incident response teams should be prepared to investigate any user reports involving OKX‑related login attempts that reference the observed page title.