Is wxrp.org a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

wXRP.org presents itself as a crypto-asset service for wrapping, bridging and swapping XRP into a wrapped token (wXRP) that moves between the XRP Ledger and the Solana network. Its homepage is a single, text-heavy landing page. Its apparent business model is to take custody of, or route, users' digital assets across two blockchains.

Scam/Impersonation Risk

This site carries elevated, confirmed risk. It is currently blacklisted: several tier-one security vendors independently flag the domain as malicious, and a further group rates it suspicious. The detections are broad enough to indicate a consistent adverse reputation, not a single outlier. For a service whose core function is to receive a user's XRP and return a wrapped asset on another chain, this matters directly. A bridge or wrapping service only works if the user sends value first and trusts the operator to honour the return leg. A malicious reputation on the front-end domain therefore bears on whether deposited assets could be lost. The sandbox runs did not observe wallet-connection prompts, wallet-draining behaviour, clipboard hijacking, hidden forms or cloaking. Those results do not offset the third-party threat detections. The hosting address also has a modest history of abuse reports. These apply to a shared hosting provider address and are secondary context, not evidence about this operator. No conflicting legal entities and no confirmed brand impersonation were identified, so the risk rests on the threat detections rather than on identity contradictions. Evidence:

• Homepage: the page positions the service as "Wrap, Bridge & Swap XRP ↔ wXRP" across the XRP Ledger and Solana, a custody-style flow in which users move assets before receiving anything.
• Threat reputation: eight engines rate the domain malicious and two suspicious, including three tier-one vendors.
• Hosting address: six community abuse reports, attributed to shared provider infrastructure and not discounted.
• Behavioural sandbox (three successful runs): no wallet-drainer, clipboard-hijack, hidden-form or cloaking activity observed.

Regulatory Verification Notes

The site gives no clear, independently verifiable disclosure of the operating entity, its governance, or any financial-services licensing or registration. The disclosure position is unclear, and ownership details are incomplete, which is ownership opacity. That is an administrative and transparency limitation, not an identity contradiction. Operating a wrapping and bridging service that holds or routes customer assets would ordinarily call for a named, accountable operator, which the available evidence does not provide. No third-party broker or regulator-style profile matched this domain. The real-world operator therefore remains unconnected to any identifiable brand or person. The domain's current registration is recent, while archive captures show the domain active for roughly three years. The registrar is a commercial registrar, and the site uses a basic domain-validated certificate. Neither establishes the operator's identity. Evidence:

• Registration: current registration created 2026-04-22 (~0.5 years old) through NICENIC International Group Co., Limited, expiring 2027-04-22.
• Archive: 12 snapshots from 2024-01-02 to 2026-09-17, spanning 3 years tracked.
• Hosting: served from AS59692 (IQWEB – IQWeb FZ-LLC, UAE).
• Transport encryption: TLS certificate issued by YR1 (DV), valid to 2027-01-03; it confirms domain control only, not operator identity.

What to Verify Next

Before any interaction beyond reading, the operator should be identified through channels independent of the site. Any claim that wXRP is an official or sanctioned wrapped asset should be checked against the issuing ecosystems' own documentation and established token registries. The listed bridge or token addresses should be compared with those published by an independent, reputable source. Official support and contact channels should be confirmed by an offline route. Any licensing claim should be confirmed with the relevant financial regulator's public register, since none is evidenced on the site. Evidence:

• Homepage: wXRP is presented as a bridged asset between the XRP Ledger and Solana, and the claim has no independent confirmation in the evidence.
• Identity: the operator's real-world identity could not be tied to any brand or person.
• Threat reputation: the malicious ratings should be re-checked on a fresh scan before any decision is revisited.

Summary Verdict

The available evidence supports a clearly cautionary posture. A confirmed adverse security reputation, combined with an unidentified operator and a service that depends on users handing over digital assets, outweighs the technically orderly behaviour observed. Reading the public page is the only low-exposure use. Any login, credential entry or financial activity sits in the unsafe range.

Infrastructure Integrity

The domain resolves to a single address at a UAE-based hosting provider, with no CDN or WAF detected in front of it. The server is therefore directly exposed and gains no protective buffering, so infrastructure offers no mitigation against the reputational risk. An unconfirmed heuristic notes a mismatch between the address's geography and its registry. It is a minor observation and carries no weight against the verdict.

Closing Assessment

Treat the site as unsuitable for connecting wallets, signing transactions, depositing assets or entering credentials. If the wrapped-XRP service is needed, obtain it from an independently verified provider reached through official ecosystem documentation, not through this domain.

Signals weighed against the site

• AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.