revoke-kerneldao[.]com

revoke-kerneldao.com poses an elevated risk as a brand impersonation threat specifically targeting the OKX cryptocurrency platform, a well-known brand in the digital asset space. The domain was created on April 18, 2026, and has since been taken offline, but its presence underscores the persistent threat of phishing campaigns aimed at crypto users. The site masqueraded as a legitimate OKX-related service under the title "KernelDAO – Earn Rewards on Ethereum, BTC & BNB | Kelp, Gain & Kernel," likely to lure victims into connecting their wallets and exposing sensitive information.

This domain was discovered through multiple intelligence sources. VirusTotal flagged it with 1 out of 95 security vendors detecting malicious activity. It was registered via NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 104.21.88.47, using a Let's Encrypt SSL certificate (E8). The domain appears on 3 security blocklists and is referenced in 1 AlienVault OTX threat intelligence pulse. These indicators collectively confirm the domain's malicious intent and the need for heightened vigilance among users.

Users who encountered revoke-kerneldao.com should immediately avoid interacting with any content from the site, especially if they connected a cryptocurrency wallet or entered credentials. It is recommended to revoke any permissions granted to the domain through wallet settings, change passwords for affected accounts, and enable two-factor authentication. Security teams should add this domain to blocklists and monitor for similar variations. PhishDestroy advises reporting such domains to relevant authorities and staying informed about impersonation tactics targeting OKX and other crypto platforms.