Highscore 46 · flagged Wednesday, October 7, 2026

ocb-finance.org

Appeared in the .org zone on Wednesday, October 7, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: finance≈binance
+28
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
dns1.p09.nsone.net, dns2.p09.nsone.net, dns3.p09.nsone.net, dns4.p09.nsone.net
First-day state
active website
HTTP status
200
Page title
OCB - Finance | Công ty tài chính, hỗ trợ vay vốn tiêu dùng
Has a form
yes
Brand echoed
binance

Model opinions

Second opinionlooks like phishingtarget: OCB (Orient Commercial Joint Stock Bank)confidence 88%· claude-opus-5-5

A newly registered Netlify-hosted .org uses the OCB logo and OCB's real 'FlexiSavings' banner to advertise 'online loans up to 900 million, approved in 15 minutes', and asks for full name, phone, password, CCCD ID photos and a face scan. This is the classic Vietnamese fake-loan identity and fee scam impersonating OCB bank, whose real domain is ocb.com.vn. The scorer's 'finance≈binance' match is a false lead.

First passlooks like phishingtarget: OCBconfidence 92%· claude-haiku-4-5

The domain impersonates OCB (a legitimate Vietnamese bank) by using its logo, branding, and Vietnamese-language financial services messaging, while hosting a credential-harvesting form that collects name, phone, and password with no offsite links—a sealed-room phishing pattern designed to deceive Vietnamese users into providing personal and authentication data.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, October 7, 2026

Screenshot of ocb-finance.org taken by the zone census on 2026-10-07

Same data as JSON: /api/zone/domain/ocb-finance.org. This page is not indexed by search engines and does not link to the site it describes.