Is Xrpl-Dex a scam? TrustSniffer's high-risk assessment of xrpl-dex.com: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as an XRP Ledger–themed decentralized exchange portal. Its homepage carries a page title that replicates the branding of the XRP Ledger's official project site, and its apparent purpose is to draw visitors into XRPL token trading or wallet-related interaction. The domain was registered only a few months ago, and the evidence does not connect it to any identified real-world operator.

Scam/Impersonation Risk

The evidence shows confirmed contradictions and the site is blacklisted. A large cluster of independent security engines currently flags it as malicious, with a smaller group marking it suspicious. These include several tier-one endpoint-security vendors, and the detections were corroborated across reputation sources. Behavioral analysis found strong cloaking. After interaction, the page's content and appearance diverged completely from what was first rendered (full semantic and visual divergence), which is a technique used to show one face to scanners and another to visitors. The homepage title copies the official XRP Ledger site's title on a lookalike domain that uses "xrpl" and "dex" in its name. That is a branding overlap which, combined with the detections and the cloaking, is consistent with brand mimicry. No conflicting legal entities were found, so there is no identity contradiction. The risk comes from the threat detections and the deceptive page behavior. Sensitive interactions such as credential entry, wallet connection or fund transfers are unsafe. Evidence:

• Homepage: the page title reproduces the XRP Ledger project's own title, while the domain is a separate, newly created registration.
• Homepage behavior: strong post-interaction cloaking, with the rendered page differing fully from its initial state.
• Reputation: eleven engines rate the domain malicious and two suspicious, and a critical external blacklist condition is active.
• Domain provenance: registered 2026-07-27 (~0.25 years old), expiring 2027-07-27, through the registrar Atak Domain.

Regulatory Verification Notes

The evidence identifies no licensing, registration or regulatory authorization tied to this site, and no third-party broker or regulatory listing matched it. Because the site presents itself as an exchange-style service for digital assets, the absence of any verifiable regulated status matters more here than it would for an ordinary content site. The operator identity is not independently verified, and the on-site disclosure picture is unclear. This gap is a verification matter and is not treated as evidence of wrongdoing by itself. The blacklisting and cloaking described above are what drive the cautionary posture. The site's transport encryption is valid but is only a basic domain-validated certificate, so it confirms an encrypted connection and says nothing about the operator's legitimacy. Evidence:

• Hosting: served from AS59692 (IQWEB – IQWeb FZ-LLC, AE).
• Transport security: TLS certificate issued by YR2 (DV), valid to 2027-01-16.
• Registration record: registrant listed only generically as "Domain Administrator", with no named legal entity.
• No regulated-entity or broker-database match was found for the domain.

What to Verify Next

Anyone considering the site should not rely on it to establish its own authenticity. The real XRP Ledger resources should be reached only through addresses obtained independently, such as the project's documented official channels, and compared against this domain. Any exchange or trading functionality claimed here should be checked against a financial regulator's public registry, using the operator name only if it can be established from a source other than this site. Anyone who has already entered credentials or connected a wallet here should treat them as exposed, revoke any wallet approvals, and rotate related passwords. Official support and contact channels should be confirmed through an independent route before any further engagement. Evidence:

• Homepage: the title imitates the official XRP Ledger site, so the genuine resource must be located separately.
• Registration record: no named operating entity is available to check against a regulatory registry.
• Reputation: the active blacklist condition means the domain should be reported to its registrar and hosting provider.

Summary Verdict

Available evidence supports a high-risk, clearly cautionary posture. Active third-party blacklisting and deceptive page behavior outweigh the modest technical hygiene the site shows, and its recent creation and unverified operator identity offer no counterweight. The site should be regarded as unsafe for any sensitive or financial interaction.

Infrastructure Integrity

The site resolves to a single address at a UAE-based hosting provider, with no CDN or WAF in front of it. Basic hosting hygiene is in order, but it does not offset the reputation findings. Five abuse reports on that address are attributed to the shared nature of the hosting infrastructure rather than to this domain alone. An unconfirmed heuristic notes a mismatch between the hosting country and the registry region, and it carries little weight.

Closing Assessment

Interaction beyond passive viewing should be avoided, including logins, wallet connections and any payment or asset transfer. Where the site must be examined, it should be done from an isolated environment, and the domain should be reported to the relevant abuse channels.

Signals weighed against the site

• AbuseIPDB: 5 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 10% confidence. The reports are attributed to shared infrastructure, not specifically to this website.