Is allthemoney-xrp.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

allthemoney-xrp.xyz is a recently created website whose name points to an XRP-themed, money-related offering. When the analysis visited it, the page served was a Cloudflare interstitial titled as a suspected-phishing warning, not ordinary site content. The only thing a visitor sees is a short warning screen. The site's real products and business model could not be established from its own content. Its apparent purpose therefore rests on the name alone, and that suggests a cryptocurrency-oriented venture.

Scam/Impersonation Risk

This is a clearly elevated-risk site. A multi-engine reputation scan returned a substantial number of malicious verdicts, including from several top-tier security vendors. That amounts to a confirmed blacklist-grade listing, and it is the decisive reason for the cautionary posture. The page captured on the homepage was a protective interstitial that classed the destination as suspected phishing, and the domain also carries a prior phishing association in historical records. No brand impersonation or conflicting legal identities were observed, because no legal or identity content was served. The risk therefore rests on the blacklist and the phishing warning, not on any identity contradiction. A short-lived, newly registered domain presenting a money-and-crypto name is a pattern commonly associated with credential and wallet-harvesting campaigns. Behavioural testing found no wallet-connection attempts, clipboard manipulation, or hidden credential forms. That does not offset the reputation findings, because the page was gated behind a bot challenge during testing, which limits what the testing could observe. Evidence:

• Homepage: the captured page was a security interstitial with a suspected-phishing title, returned with an access-denied status.
• Reputation scan: 15 malicious and 1 suspicious verdicts, including three tier-one vendors; no safe-browsing-style malicious flag.
• Domain registered 2026-08-01 (~0.24 years old); web archive holds 1 snapshot, dated 2026 (1 year tracked), and carries a prior phishing association.
• Behavioural testing (3 of 3 runs completed): 27 external XHR calls and 9 external POST requests, none to non-whitelisted destinations; 20 console errors; no wallet-connect or clipboard-write activity.

Regulatory Verification Notes

No terms, about, privacy, or licensing pages were served to the analysis, so no legal entity, licence, or registration number could be assessed. The on-page disclosure position is unclear. Operator identity could not be independently connected to any real-world brand or person. Registration details are incomplete, and this is treated as ownership opacity, which is distinct from an identity contradiction. The absence of any disclosed entity matters here only because the reputation findings already point to elevated risk. No third-party broker or regulator listing matched this site, so no regulatory standing can be inferred in either direction. Evidence:

• Registrar of record is Global Domain Group LLC; registration runs from 2026-08-01 to 2027-08-01 (a single-year term).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-28; a DV certificate confirms domain control and says nothing about the operator's identity.
• Served from AS13335 (Cloudflare, Inc., US).
• Homepage: no company name, licence, or registration number was visible in the content captured.

What to Verify Next

No credential, wallet, or payment interaction is appropriate while the listing stands. Any claimed link to an XRP project, exchange, or financial service should be checked only through that organisation's official, independently sourced channels, never through contact routes on this site. Any financial-services claim made later should be checked against the relevant national financial regulator's public register. Reputation status should be re-checked after the site's owner has had time to respond. If the site is being reported or investigated, the hosting provider's abuse channel is the appropriate route. Evidence:

• Domain registration is only about three months old, so there is no long operating record to rely on.
• Reputation findings are current as of this assessment and may change if the owner remediates.
• No third-party broker or regulator record matched the site, so independent confirmation must come from outside sources.

Summary Verdict

The site is assessed at the lowest trust tier. A confirmed multi-source blacklist and a phishing warning decisively outweigh the technically valid certificate and clean-looking transport setup. The evidence supports a high-risk classification for any sensitive use. Nothing observed supports treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge. No origin server was observable, so hosting cannot be independently verified, and edge-only visibility can mask rapid content changes. Cloudflare protection is a mitigating factor only. Here it is combined with bot-challenge gating and a very young domain with sparse subdomains, and it cannot offset the external threat detections. A valid certificate and mainstream edge infrastructure are not evidence of legitimacy.

Closing Assessment

Read-only observation is the most that is appropriate. The site should not be used for login, credential entry, wallet connection, or any financial transaction, and any link to it received through messaging or social media should be treated as hostile until its reputation status clearly changes.