wxrpl[.]com

wxrpl.com has been identified as a generic phishing site, specifically designed to trick users into believing it is the official launch and allocation platform for a cryptocurrency project called wxRPL. As of the latest analysis, the domain is offline, but its recent activity and structure strongly indicate malicious intent. The site impersonates a legitimate crypto launch, likely aiming to steal wallet credentials or seed phrases from unsuspecting investors.

Technical indicators paint a clear picture of this threat. VirusTotal data shows that 1 out of 95 security vendors flagged the domain as malicious, and it appears on 3 security blocklists. The domain was created on May 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with low-quality or abusive domains. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Let's Encrypt (E7), which is common among phishing sites due to its free and automated issuance. These factors, combined with the domain's short lifespan and the specific impersonation of a crypto launch, elevate the risk level to elevated.

Given that wxrpl.com is now offline, the immediate threat is contained, but users who may have interacted with the site should take precautions. PhishDestroy recommends that anyone who visited the site or entered any personal information immediately change their passwords and enable two-factor authentication on all associated accounts. Never trust unsolicited links promising crypto allocations or launches; always verify official URLs directly from the project's verified channels. Stay vigilant against similar domains that may emerge with slight variations.