app[.]xrpl-split[.]xyz

The domain app.xrpl-split.xyz is currently classified as an active generic phishing site with an elevated risk rating. Infrastructure analysis indicates that the domain has been intercepted by PhishDestroy, demonstrating that at least one dedicated anti‑phishing service has identified malicious activity associated with it. VirusTotal reports that 2 of 91 security vendors flagged the domain, providing independent corroboration of its malicious nature.

Additionally, the domain appears on a single security blocklist, further confirming its reputation as a threat vector. No public registrar information, IP address, hosting provider, or SSL certificate details are available in the supplied intelligence, and the page title or brand targeting has not been disclosed, limiting the depth of technical profiling. Given the limited but consistent evidence—multiple vendor detections, blocklist inclusion, and active blocking by PhishDestroy—defenders should treat the domain as hostile.

Recommended mitigations include adding app.xrpl-split.xyz to network and endpoint URL filtering policies, updating intrusion detection signatures to block outbound connections, and monitoring DNS query logs for any resolution attempts. Continuous re‑evaluation is advised, as additional indicators such as hosting infrastructure or content analysis may emerge, allowing for more precise attribution and response actions.