탐지를 보고하는 보안 엔진: 1. 일치를 보고하는 공개 차단 목록: 1. 극도의 주의를 기울이십시오 — 자격 증명이나 개인 정보를 입력하지 마십시오.
보고서 요약
MetaMask 사칭: dapp.ocaccess.dev — 마지막으로 알려진 활성 (HTTP 307). 증거 요약: VirusTotal 1/92 (CRDF); 1 external blocklist match (ScamSniffer); PhishDestroy score 71/100.…
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis
Domain summary
dapp.ocaccess.dev: MetaMask 사칭. PhishDestroy가 2026-10-23에 탐지했습니다. 위험도: 심각 (71/100). 등록 대행자: Dynadot. 상태: 마지막으로 알려진 활성. 호스팅: Cloudflare, Inc. VirusTotal: 엔진 1/92개가 탐지. 로그인 정보를 입력하거나 지갑을 연결하지 마세요.
PhishDestroy added dapp.ocaccess.dev to its internal blocklist on 2026-10-23 after an automated rule flagged the domain because VirusTotal reported a malicious detection. The recorded page title is “OC.AGENT — AI Prediction Market Infrastructure,” but the observed content did not contain clear signs of phishing, credential theft, or other malicious activity. When fetched on 2026-10-23 the server returned an HTTP 307 redirect to the /home path.
How the scam works
The listing reflects a generic suspicion that a newly created domain presenting financial‑themed services could be used for phishing, fraud, or malware distribution. No specific malicious behavior such as credential‑capture forms or wallet interactions was observed on the page, so the exact scheme cannot be determined.
Evidence
VirusTotal analysis on 2026-10-06 (retrieved 2026-10-23) flagged the domain as malicious, reporting one detection out of 92 engines, with CRDF labeling it malicious. Google Safe Browsing checked on 2026-10-23 and did not flag the domain. OTX recorded zero pulses for the domain as of 2026-10-23. URLScan scanned the site on 2026-10-23; its machine‑learning engine gave a score of 98 and applied malicious tags, while the overall community verdict was non‑malicious. PhishDestroy’s internal blocklist marks the domain as true, and external blocklists returned zero matches on the same date.
Infrastructure
The recorded DNS entries listed Cloudflare‑served IP addresses 188.114.96.3 and 188.114.97.0 (IPv6 2a06:98c1:3120:: and 2a06:98c1:3121::) and the network was identified as Cloudflare, Inc., with the recorded country Canada. TLS was provided by a Google Trust Services certificate for ocaccess.dev and *.ocaccess.dev, valid from 2026-09-14 to 2026-12-13. The domain was created 19 days before first sighting, the apex was 39 days old, TLS was 39 days old, and DNSSEC was not enabled.
What to do
Visitors should treat the site as suspicious and avoid entering credentials, private keys, or authorizing any wallet connections. If any sensitive information was submitted, change associated passwords immediately. Defenders can block the exact hostname, monitor outbound traffic to the recorded IP addresses, and note the VirusTotal and URLScan detections in threat‑intel feeds.
등록 정보(기본 도메인)ocaccess.dev · 생성됨 2026년 9월 14일 (41d · New)—Expires 2027년 9월 14일
HTTP 상태307 Temporary Redirect
기술 세부 정보Provenance & timestamps
최초 발견2026년 10월 23일
DOM Analysisanalyzed 2026년 10월 23일score 71/1003 brand signals
Submitted URLhttp://dapp.ocaccess.dev/
Favicon Hash
ICANN OVERSIGHTRegistration: ocaccess.dev
인증 및 RAA 상황
레지스트라 공인 및 DNS 악용 대응 의무
For the registrable domain ocaccess.dev behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
공인은 계약일 뿐, 안전성 인증이 아닙니다.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest HTTP observationRedirectingHTTP redirect observed80%2026-10-25 03:53:40 UTC
RDAP registration알 수 없음
Observed timelinelast reachable: 2026-10-25 03:53:40 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
기술 · 8 identified
N
Node.js
Programming languages
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
모니터와 출처 수집기가 보관한 날짜별 변경 기록입니다. 최신 관측이 먼저 표시되며, 출처 상태가 테이크다운을 입증하지는 않습니다.
가용성 모니터 · 기록된 상태
알 수 없음→redirected
http_redirect
가용성 모니터 · 기록된 상태
알 수 없음→redirected
http_redirect
가용성 모니터 · 최초 수집 기록
접속 가능
All retained availability observations7
Source: availability monitor. This journal includes earlier observations and repeated states with distinct dates or evidence. Identical records appear once; an unknown state is not proof that the site is offline.