okxono[.]org

The domain okxono.org was registered on 18 December 2024 through Domain International Services Limited and currently resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented, indicating that the site does not serve HTTPS traffic. The page title returned from the host is "OKX On," and the domain is explicitly linked to a brand‑impersonation campaign targeting the cryptocurrency exchange OKX.

Security‑tagging services PhishDestroy and ScamSniffer have taken the domain offline, and it appears on two external blocklists. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing additional independent confirmation of malicious intent. Because the site is presently offline, live content cannot be examined, and the exact phishing kit or credential‑ harvesting mechanisms remain unknown.

Defenders should treat the domain as hostile infrastructure: it should be added to network deny‑lists, DNS filtering rules, and endpoint protection blocks. Continuous monitoring of the IP 188.114.97.3 for new hostnames or changes in activity is advised, as Cloudflare‑based hosting can be leveraged for rapid re‑deployment. Given the confirmed brand‑impersonation intent, elevated risk rating, and the presence on multiple blocklists, organizations using OKX services should alert users to the existence of this domain and enforce verification of official OKX URLs.