[WARNING] Fake Ripple Airdrop via e-Mail [26.11.2020]

[bullrun2024bro]

What happened: I received an e-Mail to a fake Ripple airdrop today. The link in the e-Mail is leading to the following fake Ripple website.

Scammer Website:

Code:

http://ripple.com.so/

Virustotal-Lookup:



Source: https://www.virustotal.com/gui/url/27cc7e9d330838a8f6174f06337aeb422866eefbc25a02347434155e76b65329/detection


Quoted fake Ripple airdrop e-Mail:

Topic:    Commencing the Incentive Initiative distribution
Date:    Thu, 26 Nov 2020 15:42:14 +0000 (UTC)
From:    Ripple Insights <noreply@library.site>
To:        xxxxxx@googlemail.com

Boosting our liquidity to compensate for the economic downturn

As economies around the world are hit by the global crisis, Ripple is moving firmly towards economic recovery. With 2 earth shattering projects being put to water - the Community Incentive Plan and the Support Program, Ripple is starting to unlock XRP clusters previously reserved strictly for enterprise clients.

By making available over 5.12 Billion XRP, both campaigns are entirely focused on the users of RippleNet.

Users can enrol by whitelisting their address in preparation for the Community Incentive and Support Program. The first wave of XRP will be redistributed starting November 26 and will be aimed towards current holders - in personal addresses or exchanges.
Register

Thank you,
Team Ripple

Whois Lookup:

Domain Name: ripple.com.so
Registry Domain ID: 129168-sonic
Registry WHOIS Server:: whois.nic.so
Registrar URL:
Updated Date: 2020-07-16T20:00:18.944Z
Creation Date: 2020-07-11T17:48:55.407Z
Registry Expiry Date: 2021-07-11T17:48:55.453Z
Registrar Registration Expiration Date: 2021-07-11T17:48:55.453Z
Registrar: Key-Systems

Source: https://whois.domaintools.com/ripple.com.so


Additional Notes: Don't fall for this scam. With the upcoming Spark (Flare) airdrop for Ripple holders we can expect comparable scam attempts in the future. Always double-check. Never enter your privat key! Better safe than sorry!

[1714471511]

1714471511

[Lordhermes]

Thanks for the information for exposing these scammers

Code:

http://ripple.com.so/

So what's exactly the correct website for ripple, since most of the time I have encountered so many scam airdrop impersonating to be from ripple and bounty too as well.

[xyz]

Thanks for the information for exposing these scammers

Code:

http://ripple.com.so/

So what's exactly the correct website for ripple, since most of the time I have encountered so many scam airdrop impersonating to be from ripple and bounty too as well.

The correct website is https://ripple.com

The additional ".so" in the scam-website means this website is another one and it is located in Somalia.

[ScamViruS]

I guess this scam will come because the price of ripple has now pumped into the market, which is being discussed a lot among crypto traders. So here the scammers are trying to take advantage of this interest of the traders as an opportunity.

Because when there is more discussion about a coin, new traders become more interested in that coin. This makes it very important to warn new traders. Thank you for bringing out this website.

[qwertyup23]

I guess this scam will come because the price of ripple has now pumped into the market, which is being discussed a lot among crypto traders. So here the scammers are trying to take advantage of this interest of the traders as an opportunity.

Because when there is more discussion about a coin, new traders become more interested in that coin. This makes it very important to warn new traders. Thank you for bringing out this website.

That is true. But there are lots of fake/scam airdrops nowadays due to the bullish run of cryptocurrencies as a whole and scammers are taking advantage of such. This kind of email may seem innocent especially that airdrops are tempting to the eyes of a newbie.

I just find it disgusting that scammers are indeed taking advantage of every opportunity that arises at the moment in hopes of scamming at least one person from their malwares.

[johnjimjack]

Thanks for the information for exposing these scammers

Code:

http://ripple.com.so/

So what's exactly the correct website for ripple, since most of the time I have encountered so many scam airdrop impersonating to be from ripple and bounty too as well.

The correct website is https://ripple.com

The additional ".so" in the scam-website means this website is another one and it is located in Somalia.

Damn Somalian pirates after my ripple.
Thanks for the heads up.