xrparmystoken[.]com

PhishDestroy identifies xrparmystoken.com as an elevated-risk domain perpetrating a brand impersonation scam targeting OKX, a legitimate cryptocurrency exchange. The page title, "XRP ARMY - THE #1 MOVEMENT ON XRP | Community," is designed to lure crypto enthusiasts, but the domain has no connection to OKX or any official XRP project. This type of threat often aims to steal login credentials, private keys, or trick users into sending funds to fraudulent wallets.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags the domain with 3 out of 95 security vendors marking it as malicious, while it also appears on 1 security blocklist. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar often associated with suspicious domains. It resolves to IP address 172.67.132.74 and lacks an SSL certificate, further undermining its legitimacy. Trust scores are low across platforms, and the domain has been taken offline, likely due to abuse reports.

Users who have interacted with xrparmystoken.com should immediately change passwords on any accounts that may have been compromised and enable two-factor authentication. Since this is a brand impersonation scam, the primary risk is credential theft or phishing. Never enter sensitive information on such sites, and report the domain to relevant security authorities. For OKX users, verify all communications through official channels and avoid clicking links from unsolicited messages.