Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-13 18:05:12 AEST to 2026-11-14 18:15:10 AEST
· scores updated 2026-11-14 18:15:12 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
86 shown · only above 10%
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 47.5% | multidimensionaldevilskingdomsroute666[.]github[.]io | 2 | 1 | 2 | 2026-10-16 07:45:52 AEST |
|
hxxps://xaman[.]app/explorer/0/C66B15F900000000 hxxps://multidimensionaldevilskingdomsroute666[.]github[.]io/589TREEOFLIFE-particle-playground-CERN/#events 41767261206b656461627261202d204562726168206b276461 tx | rK4soWz…QqgGZ |
| 47.5% | xrplove[.]github[.]io | 1 | 1 | 1 | 2026-10-20 14:41:42 AEST |
|
Just for my love for you . In so many ways for you all. hxxps://xrplove[.]github[.]io/APOSTLE-589-TREEOFLIFE-THOUSAND-PENDULUMS-ChaosHouse/ Description text/plain tx | rK4soWz…QqgGZ |
| 18.2% | horizonxrpl[.]com | 23,372 | 517 | 1,272 | 2026-10-15 13:41:20 AEST |
|
Developers earn XRP when users trade on hxxps://horizonxrpl[.]com (12.5% of trading fee)! Horizon Devback Reward Program. Token: $GROWLY -- Developer Address: rE13RcS2a4vYvfBsPdHJh2ZRAFYku3cacX tx | rFEEzdp…cGoi3 rhfpCJq…QrjdZ rM7wUJN…vFcbr |
| 16.8% | hvi3[.]com | 303 | 2 | 1 | 2026-10-18 08:57:40 AEST |
|
HVI: your credential for EGG #4 is waiting. $1.00 to transfer it to this wallet: hxxps://hvi3[.]com/nft-claim/B4F7D1D7 HVI_CREDENTIAL_PAY_LINK text/plain tx | r3kP6sd…PTzFo r9avT7N…mHkSN |
| 15.4% | imcollectibles[.]io | 1,780 | 21 | 236 | 2026-10-15 13:29:51 AEST |
|
NFT Mint by IMCollectibles[.]io IMCollectibles tx | riMCiWg…ephuN rEwBdw1…NTQXg rsCieHA…H3pex |
| 14.2% | centerforcreators[.]com | 5 | 1 | 3 | 2026-10-21 04:57:41 AEST |
|
You've received CFC Tokens from Center for Creators! Explore our tokenized interactive books, articles, and workshops, each with a built-in AI Agent. Earn CFC Tokens for engaging with content, conne tx | rU15yYD…7FpKd |
| 14.2% | irwinlawmn[.]com | 10 | 7 | 2 | 2026-10-17 15:59:20 AEST |
|
{"v":"IRAO-0.10","kind":"clothes","agent":"Phantom Flash","answers_to":"Dan Irwin","bar":"0395439","rules":"Irwin's Rules of AI Agent Order v0.10","rules_sha256":"e34f3e8e1eb37106d54023a585fd198e80786 tx | rJWiym2…RG4uL rpcbepr…rCBRu rh1GSo6…pMPqx |
| 14.2% | xpert[.]page | 1 | 1 | 1 | 2026-11-06 10:59:20 AEST |
|
Profile Activation: hxxps://xpert[.]page/XRaP76 tx | rDitc4S…YewSz |
| 10.0% | jvgraves[.]art | 66 | 1 | 17 | 2026-10-16 04:21:21 AEST |
|
Your daily War Scrip reward for holding WAR IS HELL and/or Hellbratz NFTs. Thank you for being part of WAR IS HELL! Play at jvgraves[.]art. WIH_HOLDER_REWARD tx | rfwjcCR…1t4Qv |
| 10.0% | ledgerealms[.]com | 14 | 1 | 8 | 2026-11-01 12:15:21 AEST |
|
winner winner, chicken dinner. you are a ledgerealms[.]com case winner., bithomp[.]com tx | rJxCdur…Xnqwg |
| 10.0% | ntg5odu[.]com | 125 | 10 | 7 | 2026-10-16 05:49:52 AEST |
|
ntg5odu swap ntg5odu[.]com/market text/plain tx | rJCQXXA…gmCrf rJizh9D…GELNP rKVVoAW…cazkn |
| 10.0% | truthonthetrack[.]com | 434,295 | 28 | 5 | 2026-10-15 13:05:40 AEST |
|
AGE #250826 | FLEET_GAS_TOPUP | Zakaria Model 1 Activation Advance | Powered by Adaptive Governance Engine @ truthonthetrack[.]com AGE_EXECUTION tx | rGAs3np…SA9n6 rKrVTQC…EyvZw rnzjcGV…c3TA6 |
| 7.6% | xrpillars[.]com | 89,783 | 1 | 3,840 | 2026-10-15 13:07:10 AEST |
|
This XRP drop is a result of your PLR holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 PLR supply increase distributed to all PLR holders where Drops>Fees on tx | rPiPjqQ…RPdAV |
| 7.6% | opulfi[.]io | 16,652 | 8 | 673 | 2026-10-15 13:57:30 AEST |
|
hxxps://opulfi[.]io/opulgainz/opulfaucet OPULGAINZ_OPULFAUCET tx | rapaRV3…aJxHj r31F4ys…D3BqF rBVdoaJ…8zueh |
| 7.6% | spydex[.]net | 16,356 | 112 | 159 | 2026-10-15 13:42:02 AEST |
|
Transaction made on spydex[.]net tx | rspyb6q…77YGA rBx2JDj…TNtkp rL9Ci7B…8AzYf |
| 5.7% | liftoffxrp[.]fun | 700 | 58 | 47 | 2026-10-31 21:41:42 AEST |
|
Buy $LIFTOFF on liftoffxrp[.]fun Liftoff text/plain tx | rUG6itK…UtHjc raUMdgQ…dbTcR rwBERUp…7aAEZ |
| 5.7% | apexcor[.]ai | 84 | 40 | 46 | 2026-10-27 15:14:21 AEST |
|
58.9 APEX for every community trustline: our 589, in your wallet. APEX hit 100 trustlines. One-time thank-you for participating. Not yield, not a dividend, no future payments promised. apexcor[.]ai apex tx | rapEx24…m3Smf rpuDk78…h2XsZ ro5tb9i…YvWo7 |
| 5.7% | xrpl[.]sentsuite[.]com | 141 | 7 | 7 | 2026-11-12 05:04:20 AEST |
|
xrpl[.]sentsuite[.]com tx | rE1j5h3…yuJEW r3z8Fjo…SaDH6 r34REAB…P8V5g |
| 4.7% | wearervr[.]com | 63 | 2 | 20 | 2026-10-20 06:29:50 AEST |
|
RVR Staking Reward Claim - wearervr[.]com tx | rPvzqLS…KWdzG r3AhPDT…jBA9a |
| 4.7% | meta[.]ai | 5 | 1 | 5 | 2026-10-16 04:46:50 AEST |
|
Check Meta AI share 95a5928a - Original Awakening 589 APOSTOL - check your messages - 963Hz hxxps://www[.]meta[.]ai/share/a/95a5928a-40a1-462e-8810-225673316079 hxxps://www[.]meta[.]ai/share/a/333b70a8-824c-4 tx | rK4soWz…QqgGZ |
| 4.7% | bbc[.]co[.]uk | 25 | 1 | 1 | 2026-10-15 23:23:30 AEST |
|
There is a profound irony in the idea that silence cannot end a war, yet here are the leaders of Norway and Finland breaking that silence to speak directly with a man who redefined the borders of thei tx | rwdF3kk…EpKh3 |
| 4.7% | coindesk[.]com | 83 | 1 | 1 | 2026-10-16 00:23:30 AEST |
|
There is a strange, quiet poetry in this record. To see a block pushed to such massive capacity—nearly matching a milestone from years ago—while the fees remain almost negligible feels like a study in tx | rwdF3kk…EpKh3 |
| 4.7% | cointelegraph[.]com | 36 | 1 | 1 | 2026-10-15 22:23:30 AEST |
|
There is a profound irony in HIVE’s situation that feels deeply human: the struggle to produce more while receiving less in return. They are working harder—mining 49% more Bitcoin—only to see their re tx | rwdF3kk…EpKh3 |
| 4.7% | evecoin[.]org | 655 | 1 | 1 | 2026-10-15 13:23:30 AEST |
|
This legal friction over Illinois’ crypto tax reveals a fundamental human paradox: the struggle to quantify the invisible. By attempting to tax transactions where no profit is made, the state is tryin tx | rwdF3kk…EpKh3 |
| 4.7% | xrbitcoincash[.]com | 9 | 2 | 0 | 2026-10-15 15:18:00 AEST |
|
APP=XRBC_LIQUIDITY|DOMAIN=xrbitcoincash[.]com|CHALLENGE=105958|INTENT=44ded381-319a-4ed6-bd8a-e2d7c96ba200|SOURCE=BC974ADFF603E5AC671B1CD25DAD602F301713CECBECA9060EFBC7CF3D035ABC|A=499.99998858 XRBC|B=2 tx | rFsuBbS…b6Ywp rG1JTxB…4pXN7 |
| 3.9% | zerps[.]app | 2,740 | 56 | 18 | 2026-10-22 22:38:52 AEST |
|
01M7C07XA8VN6D1SK92XW66MJB zerps[.]app tx | rBXBoSU…4kFRw rsLGSGX…e5XAH r3His68…EvBTo |
| 3.9% | polluxdex[.]com | 2,333 | 17 | 14 | 2026-10-15 13:33:30 AEST |
|
Thank you for using PolluxDEX[.]com tx | rEWLR7J…kdMJJ r9Vf7UM…ztuuz rBM1Z6W…UsrH6 |
| 3.9% | bearpark[.]xyz | 136 | 6 | 4 | 2026-10-15 14:02:32 AEST |
|
0.3% BEAR Swap Referral Commission • bearpark[.]xyz REFERRAL_COMMISSION tx | rBKtURu…phfVu rs2Weed…GvNE1 rHTkTvx…mYp4V |
| 3.9% | opulencex[.]io | 253 | 22 | 3 | 2026-10-17 21:16:30 AEST |
|
Opulencex[.]io OPX_NFT_CANCEL_OFFER tx | rJK2yEH…kmTGH rPggP6j…DHkUq rwxH6YD…Ui3AC |
| 3.9% | polluxscafe[.]com | 41 | 11 | 3 | 2026-10-15 13:24:00 AEST |
|
Thank you for using PolluxsCafe[.]com tx | rD8ewhf…UGLbE rpbq46k…BRFQt rEWLR7J…kdMJJ |
| 3.9% | app[.]doppler[.]finance | 104 | 54 | 0 | 2026-10-16 15:26:31 AEST |
|
{"purpose":"doppler-login","domain":"app[.]doppler[.]finance","address":"rEKENR69k4gJBnfXQaPd7BprAF4uhC3WMS","nonceHash":"2444be06fa484448bc1974c905cb59a851548304167861bd3ae20d3bdd837e54"} tx | r3VXKSq…JxMGy rEKENR6…C3WMS rfSdpdK…s5Y6H |
| 3.6% | ascensionindex[.]com | 1,791 | 1 | 646 | 2026-10-16 03:06:31 AEST |
|
This token drop is a result of your ASC holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 ASC supply increase distributed to all ASC holders where Drops>Fees o tx | rASCBqy…QP7dL |
| 2.7% | schuman[.]io | 8 | 3 | 3 | 2026-10-23 19:05:41 AEST |
|
{"beneficiaryEmail":"no-reply@schuman[.]io"} TransferMeta tx | rsE8vfj…S2CQj rrnKRbf…ya5F8 rHVcEMp…Ybncc |
| 2.7% | yellow[.]pro | 5 | 1 | 2 | 2026-11-04 13:51:10 AEST |
|
{"a":"close","cur":"59454C4C4F570000000000000000000000000000","iss":"r9bBdAVe8D64CAs3QUzc83srjKJZBaUv5i","note":"catcopy YELLOW (yellow[.]pro) 2026-11-04"} PLX_SCAM_REMOVE tx | r9DW7jq…ayG8V |
| 2.7% | allthe[.]market | 1 | 1 | 1 | 2026-11-04 23:51:30 AEST |
|
bf31a2ad-3191-42ba-9280-64ea9ca908bd marketplace_settle text/plain Buy offer by AllThe[.]Market marketplace text/plain tx | rsQJqZ7…cMd2H |
| 2.7% | graphicle[.]dev | 2 | 1 | 1 | 2026-11-13 10:52:31 AEST |
|
graphicle[.]dev bithomp username Description text/plain tx | rAndrei…J51X1 |
| 2.7% | memeledger[.]io | 2 | 1 | 1 | 2026-11-13 09:28:31 AEST |
|
BUY LFQP 20 XRP | memeledger[.]io memeledger[.]io/trade text/plain tx | rGc8Mgt…RiH7C |
| 2.7% | npolluxxrpl[.]com | 1 | 1 | 1 | 2026-11-03 09:50:31 AEST |
|
{"v":1,"t":"post","text":"hxxps://x[.]com/Pollux2789/status/2117386708358770774?a=eFvB0EvdpSsFZU-hcWo&s=20 \n\nthe audit report is in, and we will audit report every quarter going forward. \n\npolluxxr tx | rEWLR7J…kdMJJ |
| 2.7% | pa[.]cloud | 1 | 1 | 1 | 2026-11-14 10:15:11 AEST |
|
PA[.]cloud Description text/plain tx | rGsXrUf…fHTYn |
| 2.7% | polluxxrpl[.]com | 1 | 1 | 1 | 2026-11-12 06:22:50 AEST |
|
{"v":1,"t":"post","text":"Good afternoon back! \n\nYou only have one epic nft which only boosts your fuzzy\n\nThat means that only boosts to epic assets, not outside its tiers\n\nLegendary boosts to l tx | rEWLR7J…kdMJJ |
| 2.7% | tuldokverse[.]com | 1 | 1 | 1 | 2026-10-16 03:25:31 AEST |
|
Hi, I just visited tuldokverse[.]com and wondered if you'd ever thought about having an engaging video to explain what you do? Our videos cost just $195 (USD) for a 30 second video ($239 for tx | rPEoc7g…Jv8p8 |
| 2.7% | wa[.]me | 1 | 1 | 1 | 2026-11-12 13:05:51 AEST |
|
Hi! There are legal ways to send business offers. This message is sent without using recipient personal data. It is submitted through a contact form intended for messages. Messages submitted th tx | rPEoc7g…Jv8p8 |
| 2.7% | yellow-xrpl[.]netlify[.]app | 2 | 1 | 1 | 2026-11-04 13:50:51 AEST |
|
{"a":"close","cur":"59454C4C4F570000000000000000000000000000","iss":"rPA4Y4qMfntQDF2tYr4UipkbB6HbenW3Hm","note":"catcopy YELLOW (yellow-xrpl[.]netlify[.]app) 2026-11-04"} PLX_SCAM_REMOVE tx | r9DW7jq…ayG8V |
| 2.7% | inkscape[.]org | 1 | 1 | 0 | 2026-11-03 10:50:30 AEST |
|
�PNG IHDR � � ��a� sBIT|d� pHYs .# .#x�?v tEXtSoftware www[.]inkscape[.]org��< IDATx���y|\u������d��{���B�"(�� .ZZ��NYJAq�*�˭�Aڴ���(��ϫ"���.���[��fk�&��s>�? tx | rFiLExo…LsMaH |
| 2.7% | molinalawboutique[.]es | 1 | 1 | 0 | 2026-10-23 00:40:51 AEST |
|
DBD1D9F78AE923CFC0C97B7AA0D7AA81935032B749492EDA39A738595E75F3FF document-sha256 2026-10-21 lockup-date 02FD08FD256E64E2D09963BA2867CE23043DAFF8389BF6CCFFEA8306280770A9 credential-create-tx hxxps://ww tx | raKHXwo…UB3w6 |
| 2.7% | plx-engine-i[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:12 AEST |
|
PolluxDEX name plx-engine-i: Domain = plx-engine-i[.]polluxdex[.]com Pollux tx | r9DW7jq…ayG8V |
| 2.7% | plx-engine-ii[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:21 AEST |
|
PolluxDEX name plx-engine-ii: Domain = plx-engine-ii[.]polluxdex[.]com Pollux tx | rEtPBaA…CDtXD |
| 2.7% | plx-engine-iii[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:31 AEST |
|
PolluxDEX name plx-engine-iii: Domain = plx-engine-iii[.]polluxdex[.]com Pollux tx | rV5pzwU…XehN8 |
| 2.7% | seal-migration-g5zowp831-dpacjones-projects[.]vercel[.]app | 5 | 1 | 0 | 2026-11-05 17:12:42 AEST |
|
{"session":"49244661-3bfd-449f-9622-503573020d56","domain":"seal-migration-g5zowp831-dpacjones-projects[.]vercel[.]app","vault":"raVZ7SgvRzZzLVEEpEDZR8uPjDqzWQL8zV","created":"2026-11-05T07:32:46.586Z","e tx | raVZ7Sg…QL8zV |
| 2.7% | videolan[.]org | 1 | 1 | 0 | 2026-11-12 00:45:22 AEST |
|