bd3[.]top

This domain, bd3.top, carried an elevated risk level due to its specific brand impersonation of the cryptocurrency exchange OKX. Security researchers identified it as a fraudulent site designed to deceive users into believing they were interacting with the legitimate OKX platform, potentially to steal credentials or drain crypto wallets. The domain was registered through 阿里云计算有限公司 on March 26, 2026, and resolved to IP address 104.21.89.68 with an SSL certificate from Google Trust Services / WE1. VirusTotal analysis showed that 4 out of 95 security vendors flagged the domain as malicious, and it appeared on one security blocklist. AlienVault OTX also recorded it in one threat intelligence pulse, corroborating its harmful intent.

The domain is now taken offline, meaning the immediate threat has been neutralized. However, users should remain cautious as similar domains may reappear. Those who encountered bd3.top should avoid entering any personal information or cryptocurrency credentials on the site, as it was designed to capture such data. For future safety, always double-check URLs before logging into OKX or any financial service, and use PhishDestroy to verify the legitimacy of any suspicious domain. If credentials were mistakenly entered, change them immediately and enable multi-factor authentication on OKX accounts.