revokes-cash[.]web[.]app

This domain, revokes-cash.web.app, poses a high risk as a brand impersonation threat targeting the cryptocurrency exchange OKX. The website attempts to deceive users into believing it is an official OKX service, potentially leading to credential theft or unauthorized access to their accounts.

Analysis indicates that revokes-cash.web.app was registered through Google LLC on March 24, 2026. The domain currently resolves to the IP address 199.36.158.100, which is located in the United States and is associated with Google LLC. The site has been flagged by 11 out of 95 security vendors on VirusTotal, and it appears on two security blocklists, including PhishDestroy and ScamSniffer. The SSL certificate is issued by Google Trust Services / WR4, which may give a false sense of security to users.

If a user has visited revokes-cash.web.app, they should immediately check their OKX account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already active. Users should also monitor their financial accounts and report any suspicious activity to their bank or financial institution. Reporting the incident to OKX support and the relevant security blocklists can help mitigate further risks and protect others from this threat.