---
title: "Is wxrp.org a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "wxrp.org"
verdict: "Critical Risk"
title: "Is wxrp.org a Scam? Risk Report, Score 5/100"
trust_score: 5
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/wxrp.org
assessed: 2026-10-22
---

# Is wxrp.org a scam? TrustSniffer's high-risk assessment: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** wxrp.org shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 8 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 11% confidence (AbuseIPDB, 6 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.8 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (12 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by YR1) | Noted |

## The page as captured


![Screenshot of the wxrp.org homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/wxrp.org/screenshots/first.png)

_What wxrp.org served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

wXRP.org presents itself as a crypto-asset service for wrapping, bridging and swapping XRP into a wrapped token (wXRP) that moves between the XRP Ledger and the Solana network. Its homepage is a single, text-heavy landing page. Its apparent business model is to take custody of, or route, users' digital assets across two blockchains.


### Scam/Impersonation Risk

This site carries **elevated, confirmed risk**. It is currently **blacklisted**: several tier-one security vendors independently flag the domain as malicious, and a further group rates it suspicious. The detections are broad enough to indicate a consistent adverse reputation, not a single outlier. For a service whose core function is to receive a user's XRP and return a wrapped asset on another chain, this matters directly. A bridge or wrapping service only works if the user sends value first and trusts the operator to honour the return leg. A malicious reputation on the front-end domain therefore bears on whether deposited assets could be lost. The sandbox runs did not observe wallet-connection prompts, wallet-draining behaviour, clipboard hijacking, hidden forms or cloaking. Those results do not offset the third-party threat detections. The hosting address also has a modest history of abuse reports. These apply to a shared hosting provider address and are secondary context, not evidence about this operator. No conflicting legal entities and no confirmed brand impersonation were identified, so the risk rests on the threat detections rather than on identity contradictions. Evidence:

- Homepage: the page positions the service as "Wrap, Bridge & Swap XRP ↔ wXRP" across the XRP Ledger and Solana, a custody-style flow in which users move assets before receiving anything.
- Threat reputation: eight engines rate the domain malicious and two suspicious, including three tier-one vendors.
- Hosting address: six community abuse reports, attributed to shared provider infrastructure and not discounted.
- Behavioural sandbox (three successful runs): no wallet-drainer, clipboard-hijack, hidden-form or cloaking activity observed.

### Regulatory Verification Notes

The site gives no clear, independently verifiable disclosure of the operating entity, its governance, or any financial-services licensing or registration. The disclosure position is unclear, and ownership details are incomplete, which is **ownership opacity**. That is an administrative and transparency limitation, not an identity contradiction. Operating a wrapping and bridging service that holds or routes customer assets would ordinarily call for a named, accountable operator, which the available evidence does not provide. No third-party broker or regulator-style profile matched this domain. The real-world operator therefore remains unconnected to any identifiable brand or person. The domain's current registration is recent, while archive captures show the domain active for roughly three years. The registrar is a commercial registrar, and the site uses a basic domain-validated certificate. Neither establishes the operator's identity. Evidence:

- Registration: current registration created 2026-04-22 (~0.5 years old) through NICENIC International Group Co., Limited, expiring 2027-04-22.
- Archive: 12 snapshots from 2024-01-02 to 2026-09-17, spanning 3 years tracked.
- Hosting: served from AS59692 (IQWEB – IQWeb FZ-LLC, UAE).
- Transport encryption: TLS certificate issued by YR1 (DV), valid to 2027-01-03; it confirms domain control only, not operator identity.

### What to Verify Next

Before any interaction beyond reading, the operator should be identified through channels independent of the site. Any claim that wXRP is an official or sanctioned wrapped asset should be checked against the issuing ecosystems' own documentation and established token registries. The listed bridge or token addresses should be compared with those published by an independent, reputable source. Official support and contact channels should be confirmed by an offline route. Any licensing claim should be confirmed with the relevant financial regulator's public register, since none is evidenced on the site. Evidence:

- Homepage: wXRP is presented as a bridged asset between the XRP Ledger and Solana, and the claim has no independent confirmation in the evidence.
- Identity: the operator's real-world identity could not be tied to any brand or person.
- Threat reputation: the malicious ratings should be re-checked on a fresh scan before any decision is revisited.

### Summary Verdict

The available evidence supports a clearly cautionary posture. A confirmed adverse security reputation, combined with an unidentified operator and a service that depends on users handing over digital assets, outweighs the technically orderly behaviour observed. Reading the public page is the only low-exposure use. Any login, credential entry or financial activity sits in the unsafe range.


### Infrastructure Integrity

The domain resolves to a single address at a UAE-based hosting provider, with no CDN or WAF detected in front of it. The server is therefore directly exposed and gains no protective buffering, so infrastructure offers no mitigation against the reputational risk. An unconfirmed heuristic notes a mismatch between the address's geography and its registry. It is a minor observation and carries no weight against the verdict.


### Closing Assessment

Treat the site as unsuitable for connecting wallets, signing transactions, depositing assets or entering credentials. If the wrapped-XRP service is needed, obtain it from an independently verified provider reached through official ecosystem documentation, not through this domain.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership, hosting and network.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### 05 Hosting and network
- Where the site is hosted does not match where its domain is registered. (Hosting and network `rule:DNS_GEO_MISMATCH`)

### Signals weighed against the site

- AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of wxrp.org.

- The request stayed on wxrp.org. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by my-ndns.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-04-22. (Noted)
- The earliest public archive of this site is from 2024-01-02. (Clear)
- It is hosted on IQWEB, from a server in AE. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | IQWEB - IQWeb FZ-LLC, AE |
| Country | AE |
| Server IP | 186.2.175.35 |
| Name servers | ns3.my-ndns.com, ns4.my-ndns.com |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR1 |
| SSL expiry | 2027-01-03 |
| Domain age | 2.80 years (continuous registration) |
| Domain expiry | 2027-04-22 |
| Archive first seen | 2024-01-02 |
| Archive snapshots | 12 |
| Reputation | VirusTotal: 8 flagged \| AbuseIPDB: 11% confidence, 6 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about wxrp.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [246bdb.org](https://trustsniffer.com/report/246bdb.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [1111365.org](https://trustsniffer.com/report/1111365.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [voted-xaman.org](https://trustsniffer.com/report/voted-xaman.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [verifyaml.org](https://trustsniffer.com/report/verifyaml.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [votes-xaman.org](https://trustsniffer.com/report/votes-xaman.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [vote-xaman.org](https://trustsniffer.com/report/vote-xaman.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [morphobase.org](https://trustsniffer.com/report/morphobase.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [amlshard.org](https://trustsniffer.com/report/amlshard.org), another .org site assessed as critical-risk (Critical Risk, 15/100)
- [westaridges.ltd](https://trustsniffer.com/report/westaridges.ltd), another site assessed as critical-risk (Critical Risk, 0/100)
- [globalvest.cfd](https://trustsniffer.com/report/globalvest.cfd), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/wxrp.org) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/wxrp.org · assessed 2026-10-22.*