web-okx-wallet[.]com

Analysis indicates that the domain web-okx-wallet.com was registered on February 21, 2026 through Dynadot LLC and is presently taken offline. The domain resolves to the IP address 188.114.97.3, which is associated with AS13335 Cloudflare, Inc., placing the hosting infrastructure in the United States. DNS resolution is served by the authoritative nameservers jule.ns.cloudflare.com and kianchau.ns.cloudflare.com, confirming Cloudflare as the DNS provider. The site presented an SSL certificate issued by Google Trust Services under the WE1 designation, providing a valid TLS chain but offering no indication of legitimate ownership.

The page title captured from the site, "OKX- 面向全球用户的数字资产交易与 Web3 生态服务," directly mirrors the branding of the cryptocurrency exchange OKX, and the domain is explicitly listed as impersonating that brand. Technical fingerprints show the use of Bootstrap, jQuery, HTTP/3, and enforced HSTS, all typical of modern web stacks but not proof of benign intent. Security telemetry records three of ninety‑three VirusTotal scanners flagging the domain, and it appears on a single external blocklist. PhishDestroy has actively blocked the host, and Gridinsoft assigns a trust score of 0 out of 100, indicating a high‑confidence malicious classification.

The listed scam type is a crypto scam, aligning with the brand impersonation of a digital‑asset platform. Uncertainties remain regarding the exact payload or credential‑harvesting mechanisms, as the site content has not been publicly archived. Defenders should immediately add web-okx-wallet.com and its resolving IP 188.114.97.3 to network deny lists, monitor Cloudflare‑associated subdomains for similar naming patterns, and enforce strict verification of SSL certificates that claim Google Trust Services issuance. Continuous observation of newly registered domains bearing the OKX brand or similar lexical structures is advised to pre‑empt future impersonation campaigns.