revokes-humanity[.]com

This domain, revokes-humanity.com, is identified as a brand impersonation threat specifically targeting OKX, a cryptocurrency exchange platform. Analysis indicates the site mimics legitimate OKX identity verification processes under the guise of "Humanity for Humans – Prove You’re Real, Own Your Identity." The intent appears to be credential harvesting or crypto asset manipulation, leveraging social engineering to deceive users into disclosing sensitive account details or authorizing malicious transactions. The domain’s infrastructure and page content are designed to create a false sense of legitimacy, potentially leading to unauthorized access to user wallets or exchange accounts. Evidence supporting the malicious classification includes detection by 3 of 95 security vendors on VirusTotal, with the domain appearing on three independent security blocklists. Infrastructure analysis reveals the domain was registered on June 9, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. The site resolves to the IP address 172.67.210.3 and employs Cloudflare services, including HTTP/3 and Cloudflare Browser Insights, to obfuscate its true origin and evade detection. Additionally, the domain has been flagged in two threat intelligence pulses on AlienVault OTX, further corroborating its association with malicious activity. Users who have interacted with revokes-humanity.com should immediately revoke any active sessions or authorizations granted to the domain, particularly those involving wallet connections or identity verification. It is recommended to audit all linked accounts for unauthorized transactions or configuration changes and rotate credentials for any services accessed during the interaction. Monitoring for anomalous activity, such as unexpected login attempts or asset transfers, is critical. If cryptocurrency transactions were initiated, users should verify the recipient addresses and consider reporting the incident to relevant financial or cybersecurity authorities for further investigation.