schmecklesxrpl[.]com

schmecklesxrpl.com is currently active and resolves to the IP address 104.21.52.130. The domain has been submitted to VirusTotal where it was scanned by 91 different antivirus and URL‑reputation engines; none of the engines raised a detection at the time of analysis. It appears on a single external blocklist and is listed as blocked by the PhishDestroy service, indicating that at least one security‑vendor community has observed malicious behaviour associated with the domain.

No additional intelligence such as registrar details, ASN, hosting country, SSL certificate information, HTTP response codes, Safe Browsing status, or page‑title metadata has been disclosed. Consequently, the full scope of the campaign, including the targeted brand or the exact phishing vector, cannot be confirmed. The lack of public detections does not imply benign intent, and the presence on a blocklist suggests a non‑trivial risk.

Defenders should add 104.21.52.130 to network‑level deny lists, monitor DNS queries for schmecklesxrpl.com, and enforce URL filtering policies that block the domain. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any future classification changes. Organizations using email or web gateway solutions should ensure that phishing‑prevention modules are updated to flag any communications that reference this domain.