VirusTotal
11 / 91
“Dream Meta Token”
PhishDestroy flags www.dreammetatoken.live as brand impersonation of OKX, with 0/95 VirusTotal detections. Avoid entering any credentials here.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
11 / 91
checked — no detections recorded
Bildirchecked — no match recorded
no community references
Bildirprovider verdict: clean
Bildirsaklanan rapor
Bildir Analiz tamamlandı
Bildir12 kontrol edildi — engelleme yok
Checked; no threat flag recorded
BildirPhishDestroy identifies www.dreammetatoken.live as an active brand-impersonation site targeting OKX users. This impostor domain poses a serious risk to cryptocurrency holders by mimicking the legitimate OKX exchange in order to trick visitors into entering account credentials or wallet seeds. Once obtained, stolen credentials can be used to drain funds or hijack accounts on the real exchange, leading to irreversible financial losses.
This domain was flagged by PhishDestroy’s automated pipeline on seed 67cb07. It resolved to IP 162.215.223.31 and currently operates with a valid Let’s Encrypt SSL certificate, which is a common tactic to appear trustworthy. Public scan data shows zero detections out of 95 engines on VirusTotal, highlighting how new or subtle campaigns fly under the radar until wider community reporting occurs. Domain age indicates recent registration, reinforcing the likelihood of a short-lived attack meant to capture early victims before takedowns occur.
If you visited www.dreammetatoken.live or entered any OKX credentials, immediately revoke the session in your OKX account settings and enable two-factor authentication if not already active. Transfer any remaining assets from connected wallets to a newly generated address on a clean device. Do not trust any follow-up emails claiming to be from OKX; instead, navigate directly to the official site via a bookmark or manually typed URL. Report the incident to OKX support and consider running a malware scan on the device you used to access the suspicious link.
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
0xbFeBc29e49e94Bc3aBbf5491b65a20621535eFc8Format validated · Domain analysisIoC extraction recorded 2026-07-29 02:07:57 UTC
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-187950.invalid', port=80): Max retries exceeded with url: / (Caused by
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns18.domaincontrol.comLocation describes the IP network.
7639c831e43cd4e8ce3f198eab487d8030612b4f9183ad38ff4bae841fde4193dreammetatoken.liveSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-187950.invalid · checked Mar 29, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin