dex-xrpl[.]com

Analysis of dex-xrpl.com as of 2026-08-03 shows that the domain has been catalogued as a generic phishing infrastructure. VirusTotal records indicate the domain was submitted to the service and examined by 91 independent scanning engines; none of those engines generated a detection at the time of analysis. The absence of a detection does not imply benign intent, and the domain remains listed on a single external security blocklist.

The blocklist entry is also reflected in the PhishDestroy feed, which actively blocks traffic to the domain. No additional public data on registrar, hosting IP address, autonomous system number, SSL certificate details, or HTTP response codes have been released, leaving those elements of the infrastructure unverified. The domain’s risk level is currently marked as "under investigation" and its operational status is active, indicating that threat actors may still be using the domain to host phishing content or to support credential-harvesting campaigns.

Defenders should treat dex-xrpl.com as a potentially malicious site despite the lack of detections, and incorporate it into existing URL filtering, DNS sinkhole, or web-proxy block policies. Continuous monitoring of the domain’s reputation, periodic rescans on VirusTotal, and correlation with internal telemetry for any outbound connections or credential submissions to the domain are recommended. Organizations that observe traffic to dex-xrpl.com should trigger incident response procedures, capture network logs, and isolate affected endpoints to mitigate possible credential compromise.