humanity-revokes[.]com

This domain, humanity-revokes.com, is an active phishing site impersonating OKX, a cryptocurrency exchange. Registered on June 9, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, it resolves to IP 104.21.24.10, hosted behind Cloudflare infrastructure in Canada. The page title, 'Humanity for Humans – Prove You’re Real, Own Your Identity,' suggests a social-engineering lure tied to identity verification, though the exact content and mechanics remain unconfirmed. Analysis indicates the site uses Framer Sites, React, jsDelivr, Google Tag Manager, and crypto-js, alongside Cloudflare protections and HTTP/3. A 301 HTTP status is present, potentially redirecting visitors to another malicious endpoint. Infrastructure analysis reveals the domain is flagged by at least three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists it in two threat intelligence pulses, while Gridinsoft assigns a trust score of 0/100. One of 91 security vendors on VirusTotal detects the domain as malicious. Nameservers are Cloudflare-managed (keaton.ns.cloudflare.com, oaklyn.ns.cloudflare.com), and the SSL certificate is issued by Google Trust Services (WE1). Defenders should treat this domain as high-risk, particularly for users of the targeted brand. Recommended actions include blocking the domain and IP at the perimeter, monitoring for related subdomains or redirects, and alerting users to the impersonation risk. Further investigation into the 301 redirect target and any associated wallet addresses or credential-harvesting scripts is advised.