ringprotocol[.]co

The domain ringprotocol.co was registered on February 21, 2026 and is currently listed as offline. Intelligence sources identify the site as a brand‑impersonation campaign targeting the Drift brand. The page title returned from the host is exactly “ringprotocol.co”, providing no additional context. Automated reputation services assign a Gridinsoft trust score of 0 / 100, indicating a complete lack of trust.

The domain appears on five independent security blocklists and has been actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis shows that one of ninety‑three scanning engines flagged the domain as malicious, reinforcing the suspicion of illicit activity. Although the site is not presently serving content, the combination of a brand‑impersonation classification, a zero trust score, multiple blocklist listings, and a positive detection by a VirusTotal engine constitutes strong evidence of a phishing‑oriented infrastructure.

Defenders should continue to enforce blocklist rules for ringprotocol.co, monitor DNS queries for any re‑registration or resurrection attempts, and include the domain in threat‑intel feeds that track brand‑impersonation campaigns. Because the domain is offline, no live HTTP response or SSL certificate can be examined, and no further payload details are available at this time. Ongoing observation is recommended to detect any future activation that could target Drift users.