xenorevokefi[.]sbs

The domain xenorevokefi.sbs is associated with a brand impersonation phishing scam targeting users of OKX. This domain was specifically created to mimic the OKX brand, posing an elevated risk to potential victims seeking to interact with the legitimate service. As of now, the site has been taken offline, but it previously presented a threat by attempting to deceive users through impersonation tactics. Anyone searching whether xenorevokefi.sbs is safe or a scam should be aware that it has been confirmed as a phishing site.

Technical analysis shows that xenorevokefi.sbs was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 162.0.232.60, located in the US under AS22612 Namecheap, Inc. The domain's SSL certificate was issued by Sectigo Limited / Sectigo RSA Domain Validation Secure Server CA. VirusTotal reports that 2 of 95 security vendors (including alphaMountain.ai and Webroot) have flagged this domain as malicious. Additionally, it appears on 1 security blocklist (PhishDestroy), and Gridinsoft assigns it a trust score of 0/100. The observed page title was 'Index of /', and its nameservers are dns1.namecheaphosting.com and dns2.namecheaphosting.com.

Users who interacted with xenorevokefi.sbs under the impression it was the legitimate OKX site should immediately change any associated passwords, enable two-factor authentication, and monitor their accounts for unauthorized activity, as the scam type involves impersonation rather than crypto draining. It is also advisable to report any related phishing attempts or suspicious messages to relevant security organizations and the impersonated brand to help prevent further harm.