Is xrp-badge.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly registered website operating under a domain name that references the XRP crypto-asset ecosystem and a "badge" concept. The only content retrievable from its homepage was a browser-level security interstitial titled as a suspected-phishing warning, so no products, services or operator statements could be observed. Its apparent purpose therefore cannot be established from the site itself. The domain's name, its recent creation and the warning it triggers fit the profile of a short-lived site themed around a crypto brand.

Scam/Impersonation Risk

Contradictory signals are present and decisive. A major browser-safety service currently lists the domain under its social-engineering category, which covers deceptive pages that try to extract credentials or funds. Several independent security engines also flag the domain as malicious or suspicious, so the domain is blacklisted by multiple sources. The homepage that could be retrieved was a phishing-warning interstitial rather than ordinary site content. The domain was registered only a few months ago and has almost no historical footprint. That combination is typical of disposable infrastructure stood up to target users of a crypto-themed brand. No conflicting legal-entity names were observed, and no direct brand-impersonation evidence was captured. The risk rests on the confirmed external detections and the age profile, not on any proven mimicry of a specific organisation. In sandbox testing, no wallet-connection prompts, wallet-drainer behaviour, clipboard manipulation, hidden forms or credential posts to outside parties were detected. This lowers the likelihood of automated theft during a passive visit but does not offset the listing, because the page content that would carry such behaviour was largely not served to the scanner. Evidence:

• Homepage: the retrieved page title and body were a suspected-phishing warning, not site content.
• Domain registration: created 2026-07-31 (~0.25 years old), with a registration term to 2027-07-31.
• Web-archive depth: 2 snapshots, both captured on 2026-07-31, spanning 1 year tracked.
• Sandbox behaviour: three runs showed heavy outbound request activity (21 external XHR calls, 9 external POSTs) and 30 console errors. All destinations were on the known-service allow-list, and no wallet or clipboard abuse was observed.

Regulatory Verification Notes

The retrievable page held no legal, licensing or corporate-registration disclosures, so no regulatory standing could be assessed. The real-world operator is not independently established. Registration records show incomplete or private owner details, which is ownership opacity. It is an administrative limitation here and is not treated as an identity contradiction. No regulator or third-party broker record matched the domain, so there is no regulatory or broker context to weigh against the external detections. The domain is registered through a mainstream corporate registrar and presents a valid, correctly chaining TLS certificate. These facts show only basic technical hygiene. They carry no weight as evidence of legitimacy, because inexpensive domain-validated certificates are routinely obtained by short-lived sites. Evidence:

• Registrar: Global Domain Group LLC, with owner details incomplete in the registration record.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-27.

What to Verify Next

Anyone who reached this domain through a link, message, social post or advertisement should first establish where that link originated. They should then confirm through an independent route whether any XRP-related project or service genuinely operates under this domain. Suitable routes are the project's official channels, reached by typing the address manually or through a trusted directory, not through the link received. Anyone who has already entered credentials, seed phrases or payment details here should treat them as exposed, rotate passwords and review wallet approvals and account activity. Organisations should check proxy and mail logs for earlier contact with the domain and report it through their abuse-reporting process. Evidence:

• Homepage: the interstitial indicates the domain is already under an active safety warning, so the origin of any inbound link matters.
• Registration record: the domain's age is under one year, so no long operating history can confirm a legitimate service.

Summary Verdict

The available evidence supports an elevated-risk posture. Independent external detections, a very young domain and a thin operating history converge, and none of the technical hygiene present can counterbalance them. The site is assessed as untrustworthy for any sensitive interaction, and its operator identity remains unestablished.

Infrastructure Integrity

The site sits behind a Cloudflare CDN and WAF, and every observed address is a Cloudflare edge address, with a bot-challenge layer in front of the page. This is a mitigating factor only, since such protection is available to any customer regardless of intent. Edge-only visibility also prevents independent verification of the underlying hosting, and it could allow content to change quickly behind the edge. The infrastructure does not offset the external reputation findings.

Closing Assessment

Do not log in, connect a wallet, enter credentials or seed phrases, or make payments on this domain. Visit it only for passive viewing from an isolated environment if investigation requires it. Anyone who arrived through an unsolicited link should leave the page and report it.