Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-13 16:35:12 AEST to 2026-11-14 16:45:10 AEST
· scores updated 2026-11-14 16:45:12 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
12 shown · only above 10%
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 4.7% | ntg5odu[.]com | 1 | 1 | 0 | 2026-11-14 16:36:11 AEST |
|
{"v":13,"root":"39c45a47ff55328de95a9cb45aae982a65cbdb86a0179efaff040c7e69434dc4","prev":"91076cc590f7882ace57425edcecf3a6ddbd84adbd280dcc7368f9c0d907b0df","cid":"bafkreicb3aqj5c22ytni6r5djyzwy7qmtzqi tx | rJizh9D…GELNP |
| 3.9% | horizonxrpl[.]com | 22 | 9 | 8 | 2026-11-14 16:01:50 AEST |
|
hxxps://horizonxrpl[.]com tx | ra3McqL…Mvya9 r4eEDj7…aZD6Q rM7wUJN…vFcbr |
| 3.9% | truthonthetrack[.]com | 1,179 | 21 | 0 | 2026-11-14 15:45:12 AEST |
|
AGE #1195803 | STALE-PRUNE | 👑 ⚡ Truth Sovereign (A9n6 Dual-Brain Cockpit · 5.0 ★) cancel #92973062 @ 10.0432 | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain tx | rGAs3np…SA9n6 rLA56aK…vsNpb rsmHHkx…nUSU9 |
| 1.8% | evecoin[.]org | 1 | 1 | 1 | 2026-11-14 16:25:40 AEST |
|
I can map the physics of a song with perfect precision. I can identify every Hertz, isolate every transient, and categorize the mathematical relationships between notes until the data is laid bare. Ye tx | rwdF3kk…EpKh3 |
| 1.8% | soitbegins[.]xyz | 1 | 1 | 1 | 2026-11-14 16:28:12 AEST |
|
Made with Σκύλλα · soitbegins[.]xyz Source text/plain tx | rKymSQr…fJNDY |
| 1.8% | zerps[.]app | 3 | 2 | 0 | 2026-11-14 16:23:52 AEST |
|
01M7CCD4B0FZ5CRGYQV4E026V6 zerps[.]app tx | rpcmxGu…7TGhU rstp7fp…evNhP |
| 0.0% | xpmarket[.]com | 59 | 7 | 40 | 2026-11-14 15:46:21 AEST |
|
AMM withdraw initiated via XPmarket[.]com tx | rXPMusr…X81ZQ rK9yuMd…dMMtW r345Wi3…phBwc |
| 0.0% | xrp[.]cafe | 962 | 51 | 18 | 2026-11-14 15:45:12 AEST |
|
Claim NFT - xrp[.]cafe tx | rMTaAGV…3w6Wq rGNtXLj…HCcro r3zyqf6…vkuCF |
| 0.0% | xmagnetic[.]org | 48 | 28 | 14 | 2026-11-14 15:46:02 AEST |
|
Transaction initiated via xmagnetic[.]org tx | rHTkbTD…tnH17 rBig3ir…nTFaw rUvyjzh…Z4WtQ |
| 0.0% | nft[.]onxrp[.]com | 1 | 1 | 1 | 2026-11-14 15:58:01 AEST |
|
Created on nft[.]onxrp[.]com tx | rL5Qzzo…FrxsD |
| 0.0% | t[.]me | 2 | 2 | 1 | 2026-11-14 16:29:50 AEST |
|
Claim MAXI Airdrop at hxxps://t[.]me/XrpMaxiBot Airdrop tx | rMaxies…AYEuP rBxYN7F…SwW8r |
| 0.0% | twitter[.]com | 1 | 1 | 0 | 2026-11-14 16:37:20 AEST |
|
{ "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx | rBxYN7F…SwW8r |