Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
xrp-acess.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 18 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page crypto-themed landing site on a domain that spells "access" with one "c" and references XRP. Its page title reads "Ripple — Internet of Value", branding that mimics a well-known blockchain payments company. The site appears intended to attract visitors interested in XRP or Ripple-related services, most likely to steer them into interactions that the site itself controls.
Scam/Impersonation Risk
This site shows confirmed hard contradictions and warrants a clearly cautionary stance. It is on a confirmed blacklist. A major browser-safety listing flags it for social engineering, and a large number of independent security engines, including several top-tier vendors, classify it as malicious. These detections were strong enough to trigger an automatic override of the trust assessment. The branding also compounds the concern. The page title borrows the identity of an established payments brand, while the domain is a misspelled, unrelated registration. This pattern is consistent with brand-lookalike social-engineering campaigns. Independent verification has not connected the site to any real-world operator or to the brand it echoes. Behavioral testing recorded no wallet-drainer routines, clipboard hijacking, cloaking, or hidden forms. These clean results do not offset the external detections. The same testing recorded several background data submissions to third-party destinations outside the site's own infrastructure, a high share of external traffic, and repeated client-side errors during page load. Together these indicate a page that sends data off-site, which is typical of lure pages. No contact-channel anomalies or conflicting legal identities were identified.
- The homepage title presents the Ripple brand, while the domain is a misspelled XRP-themed name with no demonstrated connection to that brand.
- The domain was registered in 2026 (about 0.17 years old) and is less than three months old. The web archive holds only 1 snapshot, captured 2026-09-13, so there is no history of legitimate operation.
- Reputation checks returned 18 malicious and 2 suspicious verdicts, with 4 top-tier vendors among them. The browser-safety listing carries the social-engineering threat type.
- Behavioral sandbox runs on the homepage recorded 3 external POST submissions to non-whitelisted destinations, a peak external-request share of 71.4%, and 3 console errors.
Regulatory Verification Notes
No licensing, registration, or legal-entity information could be tied to this site. The captured homepage offers no basis for connecting it to a regulated issuer, exchange, or payments provider, and the Ripple-style branding cannot be treated as evidence of any affiliation. No third-party broker or regulatory record matched this domain, which means the site has no regulatory standing to rely on. The domain's technical profile is typical of a newly created asset: a very recent registration through a low-profile registrar, domain-validated encryption only, and no organizational validation.
- The domain was registered through NICENIC International Group Co., Limited on 2026-08-21, with expiry set for 2027-08-21.
- The TLS certificate is domain-validated (DV) only, issued by WE1 and valid to 2027-01-17. This confirms encryption but does not authenticate the operator.
- The site is served from AS13335 (Cloudflare, Inc., US).
- No third-party broker record matched the domain.
What to Verify Next
Nothing on this site should be treated as authentic until independent confirmation is obtained. Anyone who believes they are dealing with the Ripple brand should reach the company only through its officially published channels, using addresses typed directly or found through an independent offline source. They should not use links from this site or from messages that led to it. Any invitation to connect a wallet, sign a transaction, or enter recovery phrases should be treated as a reportable lure. Anyone who has already interacted with the site should review wallet permissions, revoke token approvals, and rotate credentials. Organizations should check proxy and email logs for visits to this domain and report it to their security team.
- The site's confirmed threat listings and recent registration make the official brand's own channels the only appropriate point of verification.
- Monitoring for outbound requests from the homepage to the third-party destinations seen in testing would show whether any data was submitted.
- The domain's short registration history leaves no earlier legitimate use that could be cross-checked.
Summary Verdict
The overall posture is high risk. Confirmed threat listings, a brand-lookalike presentation, and a newly created domain converge, and no positive signal is strong enough to offset them. The site is not suitable for any sensitive interaction. Technical hygiene such as working encryption does not indicate trustworthiness here. The assessment is based on external reputation and behavioral evidence rather than on any proven identity of the operator.
Infrastructure Integrity
The site is fronted by Cloudflare, a mainstream CDN/WAF provider, and every observed address belongs to its edge network. Cloudflare is a mitigating factor only, because the same service is widely used by both legitimate and malicious sites. The origin server is not observable, so the hosting behind the edge cannot be independently verified, and content could be swapped without any visible change at the edge. The technical profile is not enough to offset the external detections.
Closing Assessment
Avoid logging in, entering credentials, connecting a wallet, or making any payment or transfer on this site. Any viewing should be limited to read-only inspection from an isolated environment, and the domain should be blocked and reported through organizational security channels.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of xrp-acess.com.
- The request stayed on xrp-acess.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-21. Noted
- The earliest public archive of this site is from 2026-09-13. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::ac43:d772 |
| Name servers | AUSTIN.NS.CLOUDFLARE.COM, KIMORA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-17 |
| Domain age | 0.17 years (continuous registration) |
| Domain expiry | 2027-08-21 |
| Archive first seen | 2026-09-13 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 18 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about xrp-acess.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.