# xrp-node.org — SUSPICIOUS

> xrp-node.org was flagged for phishing attempts. Stay informed and avoid this suspicious domain linked to XRP validator scams.

## Summary
PhishDestroy assesses xrp-node.org as a low-risk generic phishing threat. The domain aimed to deceive users, likely leveraging XRP-related content.

Supporting evidence includes its creation date in March 2026, resolution to IP 94.228.123.61, and presence on a security blocklist. VirusTotal flagged it by one out of 95 security vendors, indicating limited but noteworthy suspicion.

Currently offline, xrp-node.org no longer poses an active risk. Users should remain cautious of similar domains and avoid sharing sensitive information on unverified sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: XRP Node - Validator Documentation, Tutorials & Knowledge Base

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 94.228.123.61
- IP Country: RU
- IP City: Saint Petersburg
- IP Org: AS9123 JSC "TIMEWEB"
- Nameservers: a.dnspod.com b.dnspod.com c.dnspod.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["ThreatHive"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/mrRCYSCv/d9bfae5ca0aa.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/xrp-node.org
- PhishDestroy: https://phishdestroy.io/domain/xrp-node.org/
- LLM endpoint: https://phishdestroy.io/domain/xrp-node.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xrp-node.org/
Last updated: 2026-03-19