Security Scan Report: 11-okx.com

Redirected to:
https://www.wikipedia.org/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 27 HTTP transactions. The main domain is 11-okx.com and was registered 1 month ago.

Submitted URL: https://11-okx.com/en/verification

Effective URL:
https://www.wikipedia.org/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Roster-confirmed cloaking redirector for a Ledger/device-verification phishing kit on the OKX-lookalike host 11-okx.com; non-targeted traffic is decoyed to Wikipedia. Do not interact.

Risk Factors (4)
Cloaking redirector infrastructure confirmed by critical hunting rule and analyst-vetted kit roster
Entry domain is a lookalike of the OKX crypto-exchange brand with a verification-themed path
Non-targeted visitors are redirected to a legitimate site (wikipedia.org) as camouflage/decoy, consistent with cloaking-service evasion
Single-source phishing reputation report against the entry domain
Domain age information unavailable

Details

Page Title

Redirect

Scan Type

public

Domain Name Analysis

You're looking at domain '11-okx.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Count 6 characters in '11-okx' holding one vowel versus two consonants, notching 2 digits and 1 hyphen. Tokenizing the label suggests three words: 11, ok, x. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://11-okx.com/en/verification

Page Load Overview

0.61s
Total Load Time
353 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8 chars
Detector Agreement:0%

Website Classification

Primary Category

technology software52% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
52%
education learning
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.67.217.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9185.15.59.224United States
AS14907Wikimedia Foundation Inc.
9104.21.75.76Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
273--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12CF11F56BC0AED4AAC66AE5D103FAD3A80CDD97FCA34C8A891DDCF4407419762BD5DC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TGWLZuWFhHnFvxZD2J0SruFKuF7uFguFuuFauFKpuF+o/6ciTqHqFDXRwuWr99LW:aWLZuMnFp12Vx9p8VLgs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7635:GBAJEaAWGIJW4wKQVouMOBImCylAoRAACsEJlAEBoAgvJAHVBECoYYIpIigAEGhGHwgCAAJEUiEAGmJALbAUrZYFKI2GGUEh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000000000
Perceptual Hash:cccc3333cccc3333
Difference Hash:0000001010000000
Wavelet Hash:0c0c0c1c3f373f3f
Color Hash:#d279cc

Other Hashes

Crop Resistant:0000001010000000

Scan History

Scan history not available

Unable to load historical scan data