revokenode[.]io

PhishDestroy has flagged revokenode.io as an active brand impersonation threat targeting OKX, currently under investigation. This domain attempts to deceive users by mimicking the legitimate OKX brand, potentially leading to credential theft or other malicious activities. The page title, "Revoke what doesn’t deserve to run," is designed to provoke a reaction from users, prompting them to interact with the fraudulent site.

Technical analysis reveals that revokenode.io resolves to IP address 188.114.96.3. The domain was created on April 19, 2026, and is registered through Sav.com, LLC. As of the latest scan, VirusTotal shows a low detection rate of 2/95, indicating that it's a newly emerged or evasive threat. The site uses an SSL certificate issued by Google Trust Services, which adds a veneer of legitimacy that can fool unsuspecting users. Its current status is active.

To mitigate the risk posed by revokenode.io, users should be extremely cautious when interacting with any website claiming to be OKX. Always verify the URL and SSL certificate before entering any personal information. OKX users should enable two-factor authentication for enhanced security. Report any suspected phishing attempts to OKX support. Security teams should monitor network traffic for connections to 188.114.96.3 and block the domain revokenode.io to prevent further exposure.