537 phishing domains using Ripple, XRP and XRPL branding (fake airdrops, rewards and votes) on public blocklists (Oct 2026)

  • Scam type: Phishing
  • Project or site name: Ripple / XRP Ledger impersonation
  • Incident date: 2026-10-25
  • Reported: 2026-10-25
  • Last updated: 2026-10-25

These 537 domains use Ripple, XRP or XRP Ledger (XRPL) branding. All are on ScamSniffer's public phishing blocklist (https://github.com/scamsniffer/scam-database), MetaMask's phishing blocklist (https://github.com/MetaMask/eth-phishing-detect), or both, as of 2026-10-25. None was on blockint.ai when we checked each one by keyed search on 2026-10-25. Breakdown: 118 are on ScamSniffer only, 367 on MetaMask only and 52 on both lists. 84 use the Ripple name, 280 the XRPL name and the rest XRP. Wallet-impersonation domains for Xaman, Sologenic and GateHub are left out because they are already in…

Report a crypto scam · How to report a crypto scam