xrp-world[.]net

Analysis as of August 05, 2026 indicates that the domain xrp-world.net remains active. The domain was registered on August 01, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on the IP address 104.21.41.58, which is served by Cloudflare nameservers kia.ns.cloudflare.com and randy.ns.cloudflare.com. A VirusTotal assessment performed on the domain involved 91 antivirus and URL‑reputation engines; none reported a detection, though the absence of a flag does not guarantee benign behavior.

The domain appears on a single public blocklist, PhishDestroy, confirming that at least one security organization has classified it as malicious. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or content analysis is currently available. Consequently, the precise phishing campaign vector, targeted brand, or credential‑harvesting mechanism cannot be confirmed.

The risk level remains under investigation, reflecting the limited public evidence while the active status suggests ongoing use. Defenders should block network resolution of xrp-world.net, add the associated IP address 104.21.41.58 to deny lists, and monitor for any traffic to the Cloudflare nameservers that may indicate related infrastructure. Continuous re‑scanning with multi‑engine services and periodic checks against emerging blocklists are recommended to detect any future changes in classification or additional malicious payloads.