Is earnings-xpoints.com a scam? TrustSniffer's high-risk assessment: 13/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as the "xPoints Rewards Program" and uses the xStocks name in its page title. It offers a rewards-style landing experience on a standalone domain, and its apparent purpose is to enrol visitors in a points or earnings scheme tied to a tokenized-equities brand. The captured homepage served normally and contained a substantial amount of text. No independent evidence connects it to the brand it invokes.

Scam/Impersonation Risk

This site carries a confirmed external blacklist hit, and that is the decisive finding. At least one major threat-intelligence source currently flags the domain as malicious, and a second source rates it as suspicious. The domain was registered only weeks ago, and web-archive observation of it began just days later. A rewards program that borrows an established financial brand name, sits on a newly created domain, and is already flagged externally matches the standard profile of a brand-leveraging lure. The site's real-world operator has not been independently connected to the brand it invokes. Behavioural testing supports the caution. During three successful page loads, the site made several background data requests to third-party destinations outside the expected set. Two of these were outbound POST submissions, which means data was being sent to external parties. The page also produced a very large volume of script errors. No wallet-connection prompts, clipboard tampering, hidden forms, or page-cloaking were observed. No conflicting legal entities were found, and no phishing page was directly confirmed. The elevated risk therefore rests on the blacklist hit, the extreme domain youth, and the unexplained outbound data flows. Evidence:

• Homepage: the page title presents an "xPoints Rewards Program" under the xStocks name, while the domain itself is a separate, unrelated registration.
• Domain registration: created 2026-09-17, about 0.09 years (roughly 34 days) old at the time of analysis.
• Web archive: 3 snapshots, all between 2026-09-17 and 2026-09-25 (1 year tracked), so there is no meaningful history.
• Homepage behaviour: 9 external background requests, 6 of them to non-whitelisted destinations; 2 external POSTs, both to non-whitelisted destinations; 101 console errors across 3 runs.

Regulatory Verification Notes

The captured pages establish no licensing status, financial-services authorisation, or registered corporate identity for the operator. The broker-reputation dataset returned no match for the site. That is neutral, because it is neither a clearance nor a warning. The domain registrant details are incomplete, which amounts to ownership opacity. That is an administrative limitation and does not by itself indicate an identity contradiction. A rewards or earnings programme that invites participation under a financial brand would normally identify its operating entity and any regulatory standing. Until such disclosures are independently confirmed, the site's relationship to the brand it invokes should be treated as unestablished. Evidence:

• Domain registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-09-17.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE1 (DV only), valid to 2026-12-16. This confirms an encrypted connection but does not validate the operator's identity.
• Homepage: no operating company name, licence number, or regulator reference was established from the captured content.

What to Verify Next

Before any interaction, confirm through the official channels of the brand the site invokes whether this rewards programme exists. Those channels should be reached through independently sourced addresses, not through links on this site. Check any claimed licence or corporate registration directly with the relevant registry. Treat the destinations receiving the outbound submissions as untrusted until their ownership is understood. Where possible, report the domain to the brand owner and the hosting provider's abuse channel so the third-party listing can be reviewed. Evidence:

• Homepage: the programme's affiliation with xStocks is asserted only by the page title and the site's own presentation.
• Homepage: the outbound submissions went to destinations outside the expected set, so the recipient of any entered data cannot be determined.
• Contact channels: any support or contact route should be confirmed through an independent, offline source.

Summary Verdict

The site is assessed as high risk. A confirmed external blacklist hit, a domain only weeks old, and a lack of any independent link to the brand it invokes outweigh the technically valid encryption and the stable, error-free page delivery. The deterministic assessment places the site in the lowest trust tier, with sensitive interactions classed as unsafe.

Infrastructure Integrity

The site is served entirely through Cloudflare's network, and all four observed addresses are edge servers. The origin host was not observable, so the real hosting location and operator cannot be independently confirmed. The Cloudflare protection and the valid certificate are mitigating factors only. They do not offset the external threat listing, and they could equally mask a rapid change of site content. Heuristics also note a young domain with few subdomains, but this is unconfirmed and carries little weight.

Closing Assessment

At most, the site should be viewed read-only. No account creation, login, credential entry, wallet linking, or financial transaction should be attempted on it. Anyone who has already submitted information should treat it as exposed, change any reused passwords, and watch the relevant accounts for unusual activity.