Security Scan Report: get-xrpl.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 6 domains to perform 22 HTTP transactions. The main domain is get-xrpl.com and was registered 2 weeks ago.

Submitted URL: https://get-xrpl.com/rewards/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Impersonates Xaman on a 3-day-old domain with a fake XAMAN allocation lure and a funnel to lookalike xrpl-scaner.com; avoid and do not connect a wallet.

Risk Factors (5)
Brand impersonation of Xaman on a non-official, 3-day-old domain
Fabricated XAMAN token allocation / eligibility lure
Referral to lookalike external domain xrpl-scaner.com for wallet 'eligibility' checks
Unranked domain copying legitimate site content and branding
Reassurance language ('we never request a seed phrase') typical of crypto-drainer lures
Domain age information unavailable

Details

Page Title

Cold Storage in Your Pocket | Xaman

Scan Type

public

Domain Name Analysis

You're looking at domain 'get-xrpl.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'get-xrpl' covers 8 characters containing 1 vowel alongside 6 consonants, plus one hyphen. Splitting it apart reveals four words: get, x, r, pl. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://get-xrpl.com/rewards/

Page Load Overview

1.65s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,418 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
41%
documentation technical
38%
cryptocurrency blockchain
38%
download file sharing
35%
government public service
27%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.64.150.129Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.119Google · CDNUnited States
AS15169Google LLC
276.76.21.21Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
2172.67.162.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
228--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FED2726255D32B73C006C7D4A53A2769B7221CAFDFF24564BDAF0B93DB8799A8703009

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hRf+c9/B7t79TufAnD0/jUMWAtkSw4Kt8wUXJj+3I46XIxq:aYDEjUMWykSw3N+j+4FXIxq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28809:EDAwikQQCMKBEKHAXVdYdgBkAGAAFrhYDYJYQU4ihiIvACwWMuMaAjBUECHCFQw+BUekgyGhASBAYAiCoBCFCgoBgCusuM5I

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbf3c3e7c3cbe7ff
Perceptual Hash:e565c9896333396c
Difference Hash:2a168e4c06960e0c
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#4082bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data