Is Badge-Xrp a scam? TrustSniffer's high-risk assessment of badge-xrp.com: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, crypto-themed site on a recently created domain. Its homepage is titled "XRP Loyalty Badge — Ripple", which presents a badge or loyalty offering tied to the XRP token and the Ripple name. The page text could not be analysed in depth, so its exact mechanics are not established. The apparent purpose is to draw visitors who associate the XRP and Ripple names with an official programme. No operator is independently connected to that programme.

Scam/Impersonation Risk

The contradictory signals here are serious and mutually reinforcing. The domain is blacklisted by multiple independent threat-intelligence sources. A substantial number of security engines classify it as malicious, and several top-tier vendors are among them. This is the decisive signal, and the supporting infrastructure cannot offset it. The page title borrows a globally recognised brand and token name for a domain with no demonstrated connection to that brand. The domain is also only a few months old, so there is no track record to counter the detections. Behavioural testing adds a secondary concern. The page generated outbound data submissions to several third-party destinations outside the expected allow-list, and external traffic made up a large share of its activity. Three console errors were also recorded. No credential-capture form or wallet-drainer behaviour was triggered during testing. That does not offset the blacklisting, and a site with this profile can change its content quickly. No conflicting legal identities were observed. Evidence:

• Homepage: titled "XRP Loyalty Badge — Ripple", invoking a well-known brand without any verified affiliation.
• Reputation: confirmed blacklist listings and malicious classifications from multiple independent security sources.
• Domain registered 2026-07-28 (~0.25 years old).
• Archive depth is a single snapshot, first and last seen 2026-08-01 (1 year tracked).
• Homepage behaviour: three external data submissions to destinations outside the expected allow-list, with a high share of external requests.

Regulatory Verification Notes

The operator's real-world identity could not be tied to any legal entity, and the site's on-page disclosure of company, licence, or registration details is unclear. For a site that invokes a financial-technology brand and token name, that gap matters. It leaves no accountable party behind the "loyalty badge" proposition. No third-party regulatory or broker record matched this domain, and no licence or registry standing was found. The DV certificate shows that encryption is in place. It says nothing about who operates the site, and ownership remains opaque. Evidence:

• Registrar: NICENIC International Group Co., Limited, with a one-year registration term to 2027-07-28.
• TLS certificate: issued by WE1 (DV, domain-validated only), valid to 2026-12-24, so no organisational identity is attested.
• Served from AS13335 (Cloudflare, Inc., US).
• Homepage: no verifiable operator, legal entity, or licence reference was established.

What to Verify Next

Prospective users should treat the offering as unverified and check it only through channels independent of this domain. Ripple's own official, independently known channels should be consulted to see whether any "XRP Loyalty Badge" programme exists. Any link, message, or advertisement that led to this domain should be traced back to its source. No wallet connection, signature request, or personal or financial detail should be supplied until an official source confirms the programme. Official support and contact routes should be confirmed through the brand's own channels rather than any contact path offered here. A security team may wish to report the domain to the relevant brand-protection or abuse contacts. Evidence:

• Homepage: the programme is presented under a major brand name that cannot be corroborated from the page itself.
• Threat listings: current detections make any interaction with the site a security risk.
• Recent registration: the domain has no history to support an independent legitimacy check.

Summary Verdict

The overall posture is high risk. Confirmed blacklisting by multiple security sources and the use of a prominent brand name on a very new domain with no established operator outweigh the technically sound transport encryption. The available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin server was not observable, so independent hosting verification is limited. Cloudflare's presence is a mitigating factor only. It is shared, mainstream infrastructure used by legitimate and malicious sites alike. It does not reduce the reputational risk and can make rapid content changes harder to detect.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any financial interaction. At most, it should be viewed read-only from a controlled environment. Any link that led here should be treated as suspect and reported to the impersonated brand's official channels.