ouyd[.]org

This domain, ouyd.org, is flagged for engaging in a brand impersonation scam targeting the cryptocurrency exchange OKX. The domain was registered through Dynadot Inc on April 20, 2026, and is currently active. The page title suggests a referral scheme, stating 'Earn rewards when you get started on OKX | My referral code: 82124143 | OKX Europe.' Analysis indicates that the site uses technologies such as React, OneTrust, Naver Analytics, HSTS, Google Tag Manager, and Google Analytics, which could be leveraged to enhance the credibility and functionality of the phishing site. The domain is protected by a Let's Encrypt SSL certificate, which may mislead users into believing the site is secure. The domain has been identified in 22 threat intelligence pulses on AlienVault OTX and has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. It appears on two security blocklists and is blocked by PhishDestroy and BLP-Malware. Defenders should monitor this domain closely, especially in environments where OKX is a trusted brand. Implementing DNS-based blocking or web filters to prevent access to ouyd.org is recommended. Additionally, users should be educated to verify the legitimacy of referral links and URLs before entering any sensitive information.