xrpb26[.]com

Analysis of the domain xrpb26.com indicates it was actively involved in cryptocurrency fraud as of July 24, 2026. The domain was registered on February 21, 2026, and resolved to the IP address 172.67.142.16, hosted on Cloudflare's infrastructure (AS13335) in the United States. At the time of assessment, the domain returned a 404 Not Found HTTP status, suggesting it may have been taken down or reconfigured post-compromise. The SSL certificate associated with the domain is labeled WE1, though no further details about its issuer or validity are available in the current intelligence.

The domain appears on one security blocklist, and four out of 93 security vendors on VirusTotal flagged it as malicious, aligning with its classification as a crypto scam. PhishDestroy has blocked access to this domain, further corroborating its malicious nature. While the exact content of the site remains unanalyzed due to its offline status, the available metadata—including its creation date, hosting provider, and detection by security vendors—supports its classification as a fraudulent operation targeting cryptocurrency users.

Defenders should treat this domain as confirmed malicious and ensure it is blocked at the network and endpoint levels. Given its association with Cloudflare, monitoring for similar domains leveraging the same IP range or SSL certificate patterns may help identify related threats. No evidence links this domain to a specific cryptocurrency platform or brand, so generic crypto scam detection rules should be applied.