Wallet compromised. How to revoke access from a malicious website?

So my friend fell into the airdrop phishing trap by signing a txn on a malicious website. He claims it was only a sign txn and nothing was downloaded or installed.

Although the wallet didn't have a lot of crypto ($25 worth of eth), it does have some locked tokens which will be unlocked in 6 months worth more than $1000 at the moment.

Is the wallet completely compromised and nothing can be done about it? I tried removing the access via revoke but the site doesn't show in the revoke app.Also, he has other wallets in his trust wallet (used to sign the txn), so just by signing the txn, any chance his other wallets are compromised too? Any help would be appreciated thanks.