x2flip[.]com

This domain, x2flip.com, was registered on 14 April 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently classified as a high‑risk generic phishing site. The site is actively serving a counterfeit “Official Ripple Giveaway” page, a classic fake‑giveaway lure designed to harvest cryptocurrency credentials. Analysis indicates the domain remains live as of 12 July 2026, with an HTTP 403 response and a Let’s Encrypt certificate issued under the E7 profile. The authoritative nameservers for x2flip.com are etienne.ns.cloudflare.com and treasure.ns.cloudflare.com, pointing the domain to Cloudflare’s network. DNS resolution returns the IPv4 address 104.21.35.20, which is assigned to Cloudflare, Inc. in Canada. The web server presents Cloudflare Browser Insights and HTTP/3 support, and front‑end assets include Swiper and jQuery libraries, suggesting a lightweight landing page built on common JavaScript components. VirusTotal scans have flagged the domain on 16 of 95 security engines, and the domain appears on three independent blocklists. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The page title “Official Ripple Giveaway” aligns with the reported scam type of a fake giveaway, and the site has already been blocked by multiple defensive services, including PhishDestroy, MetaMask, and SEAL. Defenders should add 104.21.35.20 and the hostname x2flip.com to network‑level deny lists, and ensure proxy or DNS filtering solutions block the domain. Continuous monitoring of Cloudflare‑hosted IP ranges for similar giveaway‑type pages is advised, as the infrastructure can be rapidly repurposed. Incident response teams should treat any credential submissions to the site as compromised and advise affected users to rotate credentials and revoke any associated cryptocurrency wallets.