SafeMode - Analysis: www.okx.farm

Visual Capture

Detection Info

https://www.okx.farm/

Detected Brand

OKX

Country

Unknown

Confidence

95%

HTTP Status

200

Report ID

0cd2f882-1b5…

Analyzed

2026-06-15 02:39

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T19CE163324242BC1A217380989AF3FA0E51D38755C2571B90A7ED83EE99D5DA4DDAF107
CONTENT ssdeep	96:KusVzlTublYsCXKgrfyi4DgyObVPvjKtfjKtfjKWtEJQ+9IKa:0zA2sCXKgrD48yObVP7KhKhKSE6+G

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ce6666268ecc6764
VISUAL aHash	1400183c383c1818
VISUAL dHash	292d207120303030
VISUAL wHash	34143c3c3c3c3c3c
VISUAL colorHash	38007010000
VISUAL cropResistant	8a100c4c4c0c108a,292d207120303030

Code Analysis

Risk Score 12/100

Threat Level ALTO

⚠️ Phishing Confirmed

📊 Risk Score Breakdown

Total Risk Score

40/100

🔬 Comprehensive Threat Analysis

Threat Type

OKX Phishing Landing Page

Target

OKX users

Attack Method

Phishing webpage

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

OKX

Official Website

N/A

Fake Service

Credential harvesting service

⚔️ Attack Methodology

Primary Method: Malicious Landing Page

Uses OKX branding to appear legitimate in search results, social media, or advertising networks. Designed to redirect victims to phishing pages or distribute malware while maintaining appearance of authenticity.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.