invest-xrp[.]io

This report details the technical threat posed by the domain invest-xrp.io. Based on the available data, the site is an impersonation scam, specifically targeting the XRP brand. The page title is "invest-xrp.io," which suggests it was designed to mimic an official XRP investment platform. The primary threat is that it would deceive users into believing they are interacting with a legitimate XRP service, likely to steal credentials or funds.

Technical analysis provides strong evidence of malicious intent. VirusTotal shows 8 out of 95 detection engines flagged the domain as malicious. The domain was registered through Web Commerce Communications Limited, using nameservers hold1.luxhost.org and hold2.luxhost.org. It was created on 2026-02-21 and is hosted on IP 172.67.222.219 (US, AS13335 Cloudflare, Inc.). The SSL certificate is classified as WE1. It was flagged by threat intelligence vendors including alphaMountain.ai, BitDefender, CyRadar, Fortinet, and G-Data.

The domain is currently reported as DOWN/OFFLINE. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 63, indicating a high risk. Despite being offline, the domain remains a significant threat due to its impersonation of a well-known cryptocurrency brand and the technical indicators of malicious activity.