duplicate-disabled-380017.invalid

VirusTotal has recorded two positive detections out of ninety‑one scanned scanners, confirming that at least a subset of security products have flagged the host as malicious. No additional public reputation services or safe‑browsing feeds are mentioned in the supplied data. The limited detection footprint suggests that the campaign may be relatively new or operating under a low‑profile configuration, but the presence on a dedicated anti‑phishing blocklist and the VirusTotal hits demonstrate sufficient evidence of abuse to warrant precautionary measures.

Defenders should block DNS resolution for www.schmecklesxrpl.com at the network perimeter, add the IP 172.67.199.137 to any host‑based deny lists, and ensure that security tooling is updated to include the domain in threat‑intel feeds. Continuous monitoring of the domain’s registration record and any future VirusTotal scans is advised to capture potential escalation, while investigating any related traffic patterns that may indicate further exploitation. Until additional contextual details such as page content or phishing kit are released, the domain should be treated as a high‑risk phishing resource.