3 copies of a crypto-wallet homepage on unrelated random-string domains (Nov 2026)

  • Scam type: Phishing
  • Incident date: 2026-11-05
  • Reported: 2026-11-05
  • Last updated: 2026-11-05

Each of these pages is a copy of a well-known crypto wallet's homepage served on a domain the wallet does not use. web3[.]cnfgeouygw[.]biz: page title "OKX Wallet: One Crypto Wallet To Web3, Onchain OS, DeFi & Multi-Chains | OKX Wallet". Captured: page HTML 2026-11-05 15:59:43 UTC. web3[.]oycntgafcx[.]biz: page title "OKX Wallet: One Crypto Wallet To Web3, Onchain OS, DeFi & Multi-Chains | OKX Wallet". Captured: page HTML 2026-11-05 15:59:45 UTC. web3[.]gwoyicn[.]com: page title "OKX Wallet: One Crypto Wallet To Web3, Onchain OS, DeFi & Multi-Chains | OKX Wallet". Captured: page HTML…

Websites in this report: web3.cnfgeouygw.biz, web3.oycntgafcx.biz, web3.gwoyicn.com

Report a crypto scam · How to report a crypto scam