xrplarmy[.]info

The domain xrplarmy.info has been identified as a brand impersonation site, specifically targeting users of the XRP cryptocurrency. This means it was designed to look like a legitimate XRP-related service to trick visitors into entering sensitive information, such as wallet credentials or private keys. The page title was "Lovable App," which is a generic name that gives no hint of the actual threat. Because the site is now offline, you cannot currently access it, but the risk remains if you visited it before it was taken down.

PhishDestroy's investigation uncovered several technical indicators that confirm this threat. VirusTotal shows that 6 out of 95 security vendors flagged the domain as malicious, which is a significant red flag. The domain was created on February 21, 2026, which is very recent, and it was registered through NiceNIC International Group Co., Limited — a registrar sometimes abused by malicious actors. It resolved to IP address 188.114.96.3 and had an SSL certificate from Google Trust Services, which might have given it a false sense of legitimacy. The domain also appears on two security blocklists. All of these details point to a well-prepared phishing campaign.

If you visited xrplarmy.info, it is important to take immediate action. Do not enter any personal information on any site that you reached from this domain. Change your passwords for any accounts you may have used, especially XRP wallets, and enable two-factor authentication wherever possible. Run a full security scan on your device to check for malware or keyloggers. Finally, always verify the authenticity of cryptocurrency-related sites by using a trusted source like PhishDestroy before entering sensitive data. Staying vigilant is the best defense against such threats.