driphaus[.]xyz

driphaus.xyz is an active domain created on 21 February 2026 and currently resolves to 162.0.215.191, an IP address assigned to AS22612 (Namecheap, Inc.) in the United States. The domain uses a GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2 TLS certificate and returns an HTTP 403 status code. DNS records list ns5.afternic.com, ns6.afternic.com and a verification nameserver; no MX record is defined. Service fingerprinting identified Node.js, Envoy, Express, HSTS enforcement and Akamai edge delivery. The page title is "DRiP" and the site is classified as a crypto‑scam that impersonates the brand "tensor". It appears on three public blocklists (PhishDestroy, ScamSniffer, Enkrypt) and two of ninety‑five VirusTotal scanners have flagged the domain. The Gridinsoft trust score is 0/100, indicating a lack of trust. While the exact malicious payload has not been disclosed, the combination of brand impersonation, crypto‑scam labeling, and active blocklist listings marks the domain as high‑risk. Defenders should block DNS resolution to 162.0.215.191, enforce TLS inspection, and monitor traffic to the listed nameservers. Further analysis of the HTTP 403 endpoint and any associated subdomains is recommended to confirm the malicious content.