revoke-aereo-com.pages.dev Impersonates OKX and Aerodrome Finance

The domain revoke-aereo-com.pages.dev has been identified as a brand impersonation threat, specifically targeting the cryptocurrency platforms OKX and Aerodrome Finance. This domain is currently offline, but its recent creation and deceptive page title indicate a clear intent to deceive users into believing they are interacting with legitimate services. The threat type is brand impersonation, with the domain mimicking OKX while displaying a page titled 'Aerodrome Finance,' suggesting a dual-layered phishing approach.

Analysis of the domain reveals several technical indicators of malicious intent. Registered through Cloudflare, Inc., the domain was created on March 26, 2026, and resolves to IP address 188.114.97.3. It is secured with an SSL certificate from Google Trust Services (WE1). Despite being flagged by only 0 out of 95 VirusTotal vendors, indicating no detection by security scanners, it appears on 4 security blocklists. This discrepancy suggests the domain is either new or designed to evade initial detection, making it a credible threat that requires vigilance.

Given that the domain has been taken offline, the immediate risk is mitigated, but users should remain cautious. PhishDestroy recommends that anyone who may have interacted with revoke-aereo-com.pages.dev should avoid entering any personal or financial information. Users should verify the legitimacy of any URL claiming to be associated with OKX or Aerodrome Finance by visiting official websites directly. Monitoring accounts for unauthorized activity and reporting any suspicious interactions to the respective platforms is also advised. Stay alert to similar domains that may arise, as threat actors often create multiple variations to bypass takedowns.