revoke-balancer[.]pages[.]dev

This domain, revoke-balancer.pages.dev, presents a confirmed brand impersonation threat targeting users of the OKX cryptocurrency exchange platform. The site masquerades as a legitimate DeFi liquidity pool service under the title 'Balancer—DeFi Liquidity Pools,' leveraging familiar branding elements to deceive visitors into disclosing sensitive credentials or transferring digital assets. Analysis indicates the infrastructure was designed to exploit trust in decentralized finance platforms, specifically impersonating OKX to facilitate credential harvesting or unauthorized transactions. Infrastructure analysis reveals the domain was registered on May 1, 2026, through Cloudflare, Inc., a registrar frequently utilized for its privacy and security features. The domain resolves to the IP address 172.66.47.15 and employs an SSL certificate issued by Google Trust Services, adding a superficial layer of legitimacy. Despite these measures, detection metrics remain critically low, with VirusTotal reporting 0 out of 95 security engines flagging the domain at the time of analysis. Gridinsoft assigns a trust score of 0/100, and the domain appears on only one security blocklist, suggesting limited prior exposure or evasion of automated detection systems. Users who visited revoke-balancer.pages.dev are advised to take immediate remedial actions. Compromised credentials should be revoked and reset across all platforms where identical or similar login details may have been reused. Wallet addresses or transaction hashes associated with the domain should be scrutinized for unauthorized activity, and affected assets should be transferred to secure, unrelated wallets. Monitoring for phishing attempts via email or messaging platforms is recommended, as attackers may leverage harvested data for follow-up campaigns. Given the domain's current offline status, further forensic analysis may be hindered, but affected parties should report the incident to relevant security teams for broader threat intelligence sharing.