nodes-xrp[.]com

The domain nodes-xrp.com has been identified as a generic phishing threat with an elevated risk level, currently taken offline. PhishDestroy warns that this domain was likely designed to impersonate XRP-related services to harvest credentials or sensitive information. Its recent creation and low trust indicators suggest a targeted campaign.

Analysis reveals that VirusTotal flags the domain with 2 out of 95 security vendors marking it as malicious, while it appears on one security blocklist. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on March 27, 2026. AlienVault OTX includes it in one threat intelligence pulse, and the page title was simply 'frontend'. These data points collectively indicate a low-credibility domain with active malicious use.

To protect against this generic phishing threat, users should avoid clicking any links from nodes-xrp.com and never enter credentials or financial information on suspicious sites. Enable multi-factor authentication on all XRP-related accounts and monitor for unauthorized transactions. Report any encounters to relevant security teams and ensure browser security settings block known malicious domains.