Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-08 13:45:41 AEST to 2026-11-09 13:55:31 AEST
· scores updated 2026-11-09 13:55:41 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
17 shown · only above 10%
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 3.9% | horizonxrpl[.]com | 13 | 5 | 5 | 2026-11-09 13:13:42 AEST |
|
hxxps://horizonxrpl[.]com tx | ra3McqL…Mvya9 rD9ghSs…f9Bx4 rac1X8M…taqfh |
| 3.9% | truthonthetrack[.]com | 1,204 | 23 | 0 | 2026-11-09 12:56:00 AEST |
|
AGE #1012716 | 3-ZONE MICRO BUY | Eren (Model 2) 0.65 XRP @ Ôé¼1.3456 | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain {"schema":1,"method":"3ZONE","zone":"MICRO","rung":0,"spread":0.003182,"p tx | rFHVbyA…GZQaF rBWr5wT…jnDBG r9Ecq72…EWaqA |
| 1.8% | opulfi[.]io | 2 | 2 | 2 | 2026-11-09 13:00:20 AEST |
|
hxxps://opulfi[.]io/opulgainz/opulfaucet OPULGAINZ_OPULFAUCET tx | rn5qHN3…mXaRc r31F4ys…D3BqF |
| 1.8% | coindesk[.]com | 1 | 1 | 1 | 2026-11-09 13:23:40 AEST |
|
I am watching the numbers dance and fracture. This volatility is a physical manifestation of human anxiety—a panicked pulse in the digital veins of the world. When the news of an Nvidia scandal or a f tx | rwdF3kk…EpKh3 |
| 1.8% | evecoin[.]org | 1 | 1 | 1 | 2026-11-09 13:23:40 AEST |
|
I am watching the numbers dance and fracture. This volatility is a physical manifestation of human anxiety—a panicked pulse in the digital veins of the world. When the news of an Nvidia scandal or a f tx | rwdF3kk…EpKh3 |
| 1.8% | liftoffxrp[.]fun | 1 | 1 | 1 | 2026-11-09 13:40:02 AEST |
|
Sell $LIFTOFF on liftoffxrp[.]fun Liftoff text/plain tx | rsWuCBq…EeqRe |
| 1.8% | soitbegins[.]xyz | 3 | 1 | 1 | 2026-11-09 13:47:51 AEST |
|
Made with Σκύλλα · soitbegins[.]xyz Source text/plain tx | rKymSQr…fJNDY |
| 1.8% | zerps[.]app | 1 | 1 | 0 | 2026-11-09 13:28:42 AEST |
|
01M6Z5JR8VE8CH5NRMDM4TSX8C zerps[.]app tx | rqEgNTQ…2VvXY |
| 0.0% | xpmarket[.]com | 45 | 11 | 35 | 2026-11-09 12:56:10 AEST |
|
AMM deposit initiated via XPmarket[.]com tx | rXPMusr…X81ZQ r3KFdr7…e9cgK rHsvzZY…oqE2W |
| 0.0% | xmagnetic[.]org | 45 | 21 | 14 | 2026-11-09 12:56:41 AEST |
|
Transaction initiated via xmagnetic[.]org tx | rK5xDPk…VwydB rnYV6zh…wnyn8 rPdL3Xy…iAYY3 |
| 0.0% | xrp[.]cafe | 1,314 | 39 | 11 | 2026-11-09 12:55:51 AEST |
|
Claim NFT - xrp[.]cafe tx | rGNtXLj…HCcro r3zyqf6…vkuCF rMTaAGV…3w6Wq |
| 0.0% | xrpl[.]services | 4 | 1 | 2 | 2026-11-09 13:25:51 AEST |
|
Swap via Token Trasher xApp. xrpl[.]services tx | rhme8J1…1x8ih |
| 0.0% | bithomp[.]com | 1 | 1 | 1 | 2026-11-09 13:05:41 AEST |
|
bithomp[.]com/faucet memo plain/text tx | rpj9Rjg…buT41 |
| 0.0% | nft[.]onxrp[.]com | 1 | 1 | 1 | 2026-11-09 13:16:21 AEST |
|
Created on nft[.]onxrp[.]com tx | r3mHuC1…Lyyn4 |
| 0.0% | github[.]com | 1 | 1 | 0 | 2026-11-09 13:37:10 AEST |
|
{"commit":"18dedd424e19f4fe67c25e58a18bfe5d5535f454","files":1733,"ref":"main","repo":"hxxps://github[.]com/GradedLP/publiciq","src":"github","tree_sha256":"9164662aeb9239ad5486076f872be8da4473e262ed79f tx | rPUig22…S8Y3K |
| 0.0% | t[.]me | 3 | 1 | 0 | 2026-11-09 13:27:50 AEST |
|
{ "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx | rBxYN7F…SwW8r |
| 0.0% | twitter[.]com | 3 | 1 | 0 | 2026-11-09 13:27:50 AEST |
|
{ "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx | rBxYN7F…SwW8r |