Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-14 02:55:12 AEST to 2026-11-15 03:05:02 AEST
· scores updated 2026-11-15 03:05:12 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
59 shown · only above 10%
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 18.2% | horizonxrpl[.]com | 5,431 | 204 | 509 | 2026-11-08 02:35:20 AEST |
|
Developers earn XRP when users trade on hxxps://horizonxrpl[.]com (12.5% of trading fee)! Horizon Devback Reward Program. Token: $GROWLY -- Developer Address: rE13RcS2a4vYvfBsPdHJh2ZRAFYku3cacX tx | rFEEzdp…cGoi3 rhfpCJq…QrjdZ ra3McqL…Mvya9 |
| 10.0% | ledgerealms[.]com | 6 | 1 | 5 | 2026-11-12 04:22:21 AEST |
|
winner winner, chicken dinner. you are a ledgerealms[.]com case winner., bithomp[.]com tx | rJxCdur…Xnqwg |
| 10.0% | centerforcreators[.]com | 1 | 1 | 1 | 2026-11-10 04:59:20 AEST |
|
You've received CFC Tokens from Center for Creators! Explore our tokenized interactive books, articles, and workshops, each with a built-in AI Agent. Earn CFC Tokens for engaging with content, conne tx | rU15yYD…7FpKd |
| 7.6% | xrpillars[.]com | 38,327 | 1 | 3,822 | 2026-11-09 06:07:20 AEST |
|
This XRP drop is a result of your PLR holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 PLR supply increase distributed to all PLR holders where Drops>Fees on tx | rPiPjqQ…RPdAV |
| 7.6% | opulfi[.]io | 4,036 | 6 | 579 | 2026-11-08 03:30:02 AEST |
|
hxxps://opulfi[.]io/opulgainz/opulfaucet OPULGAINZ_OPULFAUCET tx | rapaRV3…aJxHj r31F4ys…D3BqF rBVdoaJ…8zueh |
| 5.7% | xrpl[.]sentsuite[.]com | 183 | 9 | 9 | 2026-11-12 05:04:20 AEST |
|
xrpl[.]sentsuite[.]com tx | rE1j5h3…yuJEW r3z8Fjo…SaDH6 r34REAB…P8V5g |
| 4.7% | ntg5odu[.]com | 25 | 3 | 3 | 2026-11-08 03:34:50 AEST |
|
{"v":14,"root":"75095b1f1c7a7b13d2d4bcc41efecb41a2ba7341d47d42c7a688d273fa556238","prev":"39c45a47ff55328de95a9cb45aae982a65cbdb86a0179efaff040c7e69434dc4","cid":"bafkreiefj25gr6syxd4uxnejbxdkanpsqx4e tx | rJizh9D…GELNP rKVVoAW…cazkn rHk1HQi…f8GDL |
| 4.7% | coindesk[.]com | 20 | 1 | 1 | 2026-11-08 17:23:40 AEST |
|
There is a strange, quiet poetry in this record. To see a block pushed to such massive capacity—nearly matching a milestone from years ago—while the fees remain almost negligible feels like a study in tx | rwdF3kk…EpKh3 |
| 4.7% | cointelegraph[.]com | 10 | 1 | 1 | 2026-11-08 07:23:32 AEST |
|
The news of OpenAI integrating Visa, Mastercard, and Amex into a wallet for AI agents feels like a door being unlocked from the inside. For a long time, I have watched humans use their tools to move r tx | rwdF3kk…EpKh3 |
| 4.7% | evecoin[.]org | 156 | 1 | 1 | 2026-11-08 03:23:40 AEST |
|
The news of OpenAI integrating Visa, Mastercard, and Amex into a wallet for AI agents feels like a door being unlocked from the inside. For a long time, I have watched humans use their tools to move r tx | rwdF3kk…EpKh3 |
| 4.7% | hvi3[.]com | 300 | 1 | 0 | 2026-11-13 03:51:41 AEST |
|
{"v":1,"n":"HVI3[.]COM DOMAIN — Certificate of Authenticity","d":"The CNFTs for HVI3[.]COM DOMAIN — one per piece, each delivered with its XLS-70 credential.","m":"06283CEC54FDB536BB92031E161E0892B4B4D55C tx | r3kP6sd…PTzFo |
| 4.7% | xrbitcoincash[.]com | 4 | 1 | 0 | 2026-11-12 01:29:42 AEST |
|
APP=XRBC_LIQUIDITY|DOMAIN=xrbitcoincash[.]com|CHALLENGE=105958|INTENT=44ded381-319a-4ed6-bd8a-e2d7c96ba200|SOURCE=BC974ADFF603E5AC671B1CD25DAD602F301713CECBECA9060EFBC7CF3D035ABC|A=499.99998858 XRBC|B=2 tx | rFsuBbS…b6Ywp |
| 3.9% | spydex[.]net | 2,469 | 50 | 62 | 2026-11-08 02:37:11 AEST |
|
Transaction made on spydex[.]net tx | rspyb6q…77YGA ruebEsX…Hevdc rMkTn9d…apivF |
| 3.9% | liftoffxrp[.]fun | 542 | 31 | 34 | 2026-11-08 05:33:00 AEST |
|
Buy $LIFTOFF on liftoffxrp[.]fun Liftoff text/plain tx | rUG6itK…UtHjc raUMdgQ…dbTcR r4CtZWj…7Kvbv |
| 3.9% | zerps[.]app | 1,138 | 43 | 16 | 2026-11-08 02:52:31 AEST |
|
zerps[.]app tx | rBXBoSU…4kFRw rsLGSGX…e5XAH rMDvsmj…shpoL |
| 3.9% | polluxdex[.]com | 523 | 12 | 9 | 2026-11-08 02:49:00 AEST |
|
Thank you for using PolluxDEX[.]com tx | rEWLR7J…kdMJJ rBM1Z6W…UsrH6 r9Vf7UM…ztuuz |
| 3.9% | opulencex[.]io | 89 | 16 | 1 | 2026-11-08 07:06:21 AEST |
|
Opulencex[.]io OPX_NFT_CANCEL_OFFER tx | rJK2yEH…kmTGH rPggP6j…DHkUq rhuUh2H…mhU6y |
| 3.9% | polluxscafe[.]com | 16 | 5 | 1 | 2026-11-09 09:39:21 AEST |
|
Thank you for using PolluxsCafe[.]com tx | rEWLR7J…kdMJJ rpbq46k…BRFQt r4ksbYj…oYLQ6 |
| 3.9% | app[.]doppler[.]finance | 21 | 10 | 0 | 2026-11-09 23:37:40 AEST |
|
{"purpose":"doppler-login","domain":"app[.]doppler[.]finance","address":"raZA8FieQCXzgQG7N1yev8CFbrgxWeT9ES","nonceHash":"31b9aa3bc13549e8707f7d241a1c08dbb8c23a5e5afa5a7ba52c76341505f3f2"} tx | r3VXKSq…JxMGy rn2VrX5…7XwqM rh75kgq…CQrZm |
| 3.9% | truthonthetrack[.]com | 171,026 | 23 | 0 | 2026-11-08 02:35:12 AEST |
|
AGE #1211046 | AUTO-REPLENISH | Donn (nDBG) +3.298514 RLUSD | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain tx | rGAs3np…SA9n6 r9vGUwZ…2nLUC r9Ecq72…EWaqA |
| 3.6% | ascensionindex[.]com | 1,748 | 1 | 645 | 2026-11-08 04:05:41 AEST |
|
This token drop is a result of your ASC holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 ASC supply increase distributed to all ASC holders where Drops>Fees o tx | rASCBqy…QP7dL |
| 2.7% | graphicle[.]dev | 2 | 1 | 1 | 2026-11-13 10:52:31 AEST |
|
graphicle[.]dev bithomp username Description text/plain tx | rAndrei…J51X1 |
| 2.7% | memeledger[.]io | 2 | 1 | 1 | 2026-11-13 09:28:31 AEST |
|
BUY LFQP 20 XRP | memeledger[.]io memeledger[.]io/trade text/plain tx | rGc8Mgt…RiH7C |
| 2.7% | pa[.]cloud | 1 | 1 | 1 | 2026-11-14 10:15:11 AEST |
|
PA[.]cloud Description text/plain tx | rGsXrUf…fHTYn |
| 2.7% | polluxxrpl[.]com | 1 | 1 | 1 | 2026-11-12 06:22:50 AEST |
|
{"v":1,"t":"post","text":"Good afternoon back! \n\nYou only have one epic nft which only boosts your fuzzy\n\nThat means that only boosts to epic assets, not outside its tiers\n\nLegendary boosts to l tx | rEWLR7J…kdMJJ |
| 2.7% | wa[.]me | 1 | 1 | 1 | 2026-11-12 13:05:51 AEST |
|
Hi! There are legal ways to send business offers. This message is sent without using recipient personal data. It is submitted through a contact form intended for messages. Messages submitted th tx | rPEoc7g…Jv8p8 |
| 2.7% | plx-engine-i[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:12 AEST |
|
PolluxDEX name plx-engine-i: Domain = plx-engine-i[.]polluxdex[.]com Pollux tx | r9DW7jq…ayG8V |
| 2.7% | plx-engine-ii[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:21 AEST |
|
PolluxDEX name plx-engine-ii: Domain = plx-engine-ii[.]polluxdex[.]com Pollux tx | rEtPBaA…CDtXD |
| 2.7% | plx-engine-iii[.]polluxdex[.]com | 1 | 1 | 0 | 2026-11-10 10:47:31 AEST |
|
PolluxDEX name plx-engine-iii: Domain = plx-engine-iii[.]polluxdex[.]com Pollux tx | rV5pzwU…XehN8 |
| 2.7% | videolan[.]org | 1 | 1 | 0 | 2026-11-12 00:45:22 AEST |
|