revoke-gaintrades[.]com

The domain revoke-gaintrades.com is a confirmed phishing site engaged in brand impersonation targeting OKX, a cryptocurrency exchange. It poses an elevated risk as a cryptocurrency scam designed to deceive users into disclosing login credentials or sensitive account information. No drainer kit was detected, but the site was actively impersonating OKX to facilitate fraudulent activity. As of the latest verification, revoke-gaintrades.com has been taken offline.

Technical indicators confirm the malicious nature of revoke-gaintrades.com. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, Bfore.Ai PreCrime, and CyRadar. It appears on 1 security blocklist, PhishDestroy, and was registered through OwnRegistrar, Inc. on November 12, 2025. The domain resolved to the IP address 188.114.97.3, hosted by Cloudflare (AS13335) in the US, and used Cloudflare nameservers (finley.ns.cloudflare.com, isabel.ns.cloudflare.com). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'revoke-gaintrades.com | 522: Connection timed out'. Technologies detected include Cloudflare and HTTP/3.

Users who interacted with revoke-gaintrades.com should immediately change their OKX account passwords and enable two-factor authentication (2FA) if not already active. Monitor the account for unauthorized transactions or suspicious activity, and report any fraud to OKX support. Additionally, revoke any token approvals granted to unknown or suspicious contracts using tools like Etherscan or Revoke.cash. Report the phishing domain to Google Safe Browsing, PhishTank, and the impersonated brand (OKX) to aid in takedown efforts.