wwwplwebnne[.]com

This domain is flagged as a high-risk brand impersonation targeting OKX, a cryptocurrency exchange platform. The page title explicitly promotes a referral code and rewards program, characteristic of an Airdrop Scam phishing kit. The domain resolves to IP 54.215.31.113 and was registered on October 2, 2025, through Dynadot Inc. Security analysis shows 12 of 95 vendors on VirusTotal flag the domain as malicious, and it appears on two blocklists (PhishDestroy, BLP-Malware) and 22 threat intelligence pulses on AlienVault OTX. The site uses a Let's Encrypt SSL certificate and employs React, OneTrust, Naver Analytics, Google Tag Manager, HSTS, and HTTP/3 technologies. The Gridinsoft trust score is 0 out of 100, indicating no confidence in its legitimacy. Defenders should block access to this domain at the network and email gateway levels, as it is actively used to harvest credentials or distribute malware under the guise of a legitimate OKX rewards program. The exact page content beyond the title has not been captured, but the combination of brand impersonation, phishing kit detection, and low trust score warrants immediate action.