Is ervnjvnjnvsjknvskdjnvjs.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "XRPL Wallet Connect" landing page at a randomly constructed, non-brand domain. It invites visitors to connect an XRP Ledger wallet through Xaman, Ledger, GemWallet or Crossmark, using a "Connect Wallet" prompt and four wallet buttons. The page has no discernible operator, no explanatory content and no visible revenue model. Its apparent purpose is to funnel visitors into a wallet-connection step on an unattributed site.

Scam/Impersonation Risk

Material contradictions are present. The site is blacklisted: a major browser-protection service flags it for deceptive, social-engineering behaviour, and a substantial number of independent security engines classify it as malicious, including several tier-one vendors. These external detections are the decisive factor in the assessment. No brand impersonation or conflicting legal identities were observed, and the analysis found no wallet-drainer or clipboard-hijack behaviour during sandbox runs. The danger lies in the context. Connecting an XRP Ledger wallet can grant signing or account-level access, and this page asks for that access with no operator, terms or explanation of what happens after connection. During testing the page also generated outbound POST and XHR traffic to external, non-whitelisted destinations, which is disproportionate for a page that is otherwise static and carries almost no content. The domain was created only weeks ago, with minimal historical footprint, which is typical of short-lived infrastructure set up for wallet-targeting campaigns. Evidence:

• Homepage: a wallet-connect prompt listing four named XRP Ledger wallets, with about 180 characters of text and no operator, contact or policy content.
• Domain provenance: registered through NICENIC International Group Co., Limited on 2026-09-27, about 0.07 years (~24 days) old.
• Archive depth: 3 archive snapshots between 2026-09-27 and 2026-10-09 (1 year tracked), consistent with a brand-new domain.
• Homepage network behaviour: repeated outbound POST and XHR requests to external, non-whitelisted hosts across all sandbox runs.

Regulatory Verification Notes

The page names no legal entity, licence, registration number, jurisdiction, terms of use or privacy policy, and the registration details are also incomplete, so ownership opacity compounds the content gap. A service that requests wallet access while disclosing nothing about who controls it, under which rules, or how user assets are handled does not meet a baseline for sensitive financial interaction. No third-party broker or regulatory-database match exists for this site, so there is no external signal either way on its regulatory standing. The weight of the assessment rests on the confirmed threat detections rather than on this disclosure gap alone. Evidence:

• Homepage: no company name, licence, address, terms or privacy content is present on the page.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate is domain-validated (DV), issued by YE2 and valid to 2026-12-26. It confirms only an encrypted connection, not operator identity.

What to Verify Next

Any contact with this site should start from the position that its link to the wallet providers it names is unproven. The wallet providers' own official channels should be checked for any statement of an authorised "XRPL Connect" integration at this address. The site should not be reached through links received via messages, social media or advertising. If a legitimate service is claimed, the operating entity and its regulatory status should be established through an independent registry or an offline contact route. Wallet owners who have already connected here should review and revoke connected-site permissions in each wallet. Evidence:

• Homepage: all four wallet names are shown, but nothing indicates they have authorised or integrated with this page.
• Homepage: no operator, contact route or policy page exists to support a direct inquiry.
• Reputation status: current third-party threat detections remain active against the domain.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Confirmed external threat detections combine with a very new domain, minimal content and an unattributed wallet-access prompt. The favourable technical hygiene present does not offset these indicators. The site should not be treated as a safe place for any sensitive interaction.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and every observed address is an edge server, so the origin host could not be observed. The certificate is valid and the infrastructure is mainstream. This is a mitigating factor only and says nothing about the legitimacy of the operator behind the site. Edge-only visibility also means hosting cannot be independently verified, and it allows content to be swapped quickly. The domain's young age and sparse subdomain footprint were noted as an unconfirmed heuristic and carry limited weight beside the confirmed detections.

Closing Assessment

The site should be limited to, at most, passive viewing. No wallet should be connected, no signing request approved, and no credentials or funds entered. Anyone who has already interacted with the page should treat the wallet as potentially exposed and move assets to a fresh wallet if there is any doubt.