xrplfund[.]web[.]app

This domain, xrplfund.web.app, poses a high-risk brand impersonation threat by mimicking the official XRPL Foundation website. Visitors are presented with a page titled 'Home - XRPL.org,' designed to deceive users into believing they are interacting with legitimate XRPL Foundation resources. The site may solicit sensitive information, such as wallet credentials or personal data, under false pretenses, leading to financial loss or identity compromise. Analysis indicates the domain was registered through Google LLC’s Firebase hosting service on February 21, 2026, and currently resolves to the IP address 199.36.158.100, located in the United States under AS54113 (Fastly, Inc.). Security vendors have flagged the domain, with 1 out of 95 engines on VirusTotal detecting it as malicious. The SSL certificate is issued by Google Trust Services (WR4), a common practice among legitimate and malicious sites alike. The domain appears on three security blocklists, including those maintained by independent threat intelligence platforms. If you have visited xrplfund.web.app, take immediate action to mitigate potential risks. Disconnect any active sessions with the site and cease all interactions. If you entered credentials or financial details, assume they are compromised and update passwords or keys on the legitimate XRPL Foundation platform. Monitor accounts for unauthorized transactions or suspicious activity. Report the domain to your security team or a trusted threat intelligence provider to aid in broader mitigation efforts. Avoid revisiting the site or clicking any links associated with it.