xrplwalletripple[.]com
“XRP Wallet â Official Self-Custodial Wallet”
Riepilogo delle prove
This domain, xrplwalletripple.com, is identified as a high-risk brand impersonation resource targeting XRP, a major cryptocurrency. Analysis indicates the domain mimics an official self-custodial wallet, presenting itself under the page title 'XRP Wallet — Official Self-Custodial Wallet.' The intent appears to be credential harvesting or cryptocurrency theft, though no explicit drainer kit signatures were observed in initial scans. The domain exhibits characteristics consistent with cryptocurrency phishing, including the use of brand-specific terminology and a deceptive interface designed to mislead users into disclosing sensitive wallet information.
Technical indicators confirm the malicious nature of this domain. It is flagged by 15 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain is registered through CNOBIN INFORMATION TECHNOLOGY LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.206.23, which is hosted behind Cloudflare, a common tactic to obscure infrastructure details. The domain was created on May 9, 2024, and is currently listed on three security blocklists. Technologies detected include HSTS, Cloudflare Browser Insights, and HTTP/3, further complicating detection and mitigation efforts. No Google Safe Browsing (GSB) hits were reported at the time of analysis, though this may reflect delayed propagation rather than benign status.
As of the latest assessment, xrplwalletripple.com has been taken offline, likely in response to security vendor alerts and blocklist inclusions. It is blocked by multiple security mechanisms, including browser-based protections and cryptocurrency wallet filters. Despite its offline status, residual risk remains due to the potential for re-registration or migration to alternative infrastructure. Users who interacted with the domain are advised to revoke any wallet permissions, monitor for unauthorized transactions, and verify the legitimacy of any cryptocurrency-related communications. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260511-7E337C- Titolo della pagina acquisita
- XRP Wallet — Official Self-Custodial Wallet
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | xrplwalletripple.com/ |
malware | Detects file containing Telegram Bot API |
| DNS4EU | xrplwalletripple.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
14 → 15
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
4 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo