fxrp-claim[.]top

This domain is flagged as a high-risk brand impersonation threat specifically targeting Ripple (XRP) cryptocurrency users through a fraudulent airdrop scheme. Analysis indicates the domain is designed to deceive victims into believing they are participating in an official Ripple token distribution, a common tactic used to harvest wallet credentials or distribute malicious smart contracts. Infrastructure analysis reveals the domain fxrp-claim.top resolves to IP address 104.21.64.149 and was registered on May 4, 2026, through 耐思尼克国际集团有限公司. Security vendor detections show 16/95 engines on VirusTotal flagging the domain as malicious, while it appears on 4 security blocklists. The domain holds a Gridinsoft trust score of 0/100, further confirming its malicious nature. Detected technologies include Google Web Server, HSTS, and HTTP/3, which may be leveraged to appear legitimate. The domain has been blocked by MetaMask, PhishDestroy, SEAL, and InversionDNS, and is currently offline. Mitigation for this threat type requires immediate action from both users and security teams. Users who interacted with this domain should revoke any connected wallet permissions, transfer assets to a new wallet, and scan devices for malware. Organizations should block the domain and IP at the firewall level, add the domain to email and web filtering rules, and monitor for related indicators of compromise. Cryptocurrency platforms should warn users about this specific scam and implement transaction screening for addresses linked to this domain. Given the high-risk nature of airdrop scams, user education on verifying official sources and avoiding unsolicited token distributions is critical.