black-xrp[.]com

The domain black-xrp.com was registered on October 28, 2025 through Dominet (HK) Limited and currently resolves to the IP address 172.67.188.35, which belongs to AS13335 Cloudflare, Inc. in the United States. No SSL certificate is presented for the host, and an HTTP request returns a 404 Not Found page title, indicating that the site is not serving legitimate content. Google Safe Browsing flags the domain for social engineering, and the site is listed on one security blocklist, specifically PhishDestroy, confirming its classification as a crypto‑related scam. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0 out of 100, while Scamadviser records a score of 1 out of 100, both reflecting a high likelihood of malicious intent.

VirusTotal analysis shows that 12 of 95 security vendors have flagged the domain, reinforcing the suspicion. The domain explicitly impersonates the XRP brand and is categorized as a crypto scam, matching the observed threat type of brand impersonation. Nameserver configuration uses ulla.ns.cloudflare.com and zod.ns.cloudflare.com, typical of Cloudflare‑hosted infrastructure.

The site is currently offline, as indicated by the status field and the 404 response, but historical activity suggests it was used for phishing or fraud targeting XRP users. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat intelligence feeds with the observed indicators, and monitor for any re‑registration attempts or similar domains using the same registrar or hosting provider. Ongoing vigilance is recommended, especially for endpoints that may have previously accessed the site before it was taken offline.