Is fxrp-flarenetwork.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The domain fxrp-flarenetwork.xyz presents a name that combines the "FXRP" token label with "Flare Network". It sits on the low-cost .xyz extension, which suggests a crypto-asset or decentralised-finance themed web property. The evidence gives no reliable picture of what the site offers visitors, so its apparent purpose and business model are inferred from the naming alone. The naming borrows from established blockchain projects, and the site seems to be positioned as an adjunct to them.

Scam/Impersonation Risk

Hard contradictions are present, so the posture is cautionary. Several leading security engines currently classify the domain as malicious, with further engines marking it suspicious, and an external blacklist designation is in force. Those detections are strong enough to override every protective trait the site shows. The domain was registered only a few months ago and its name echoes established crypto brands. That combination is a familiar pattern for lookalike and asset-drain campaigns. The evidence does not confirm brand impersonation or a phishing page, and no conflicting legal identities were observed, so the concern rests on the reputation signals alone. In the behavioural sandbox the site made no external network calls, showed no wallet-drainer or clipboard-hijack activity, and loaded no hidden or credential-harvesting forms. That is a mitigating observation, but it does not offset the detections, because a clean automated visit does not rule out later content changes. Evidence:

• Homepage reputation check: 12 security engines flagged the domain as malicious and 2 as suspicious, and the external blacklist flag is active.
• Domain registration: created 2026-05-09 (~0.46 years old), so the domain has almost no operating history.
• Behavioural sandbox across three successful visits: no external requests, no wallet-connection attempts, no password-form posting to third parties, and no cloaking.
• Content provenance: no wallet-connection, trading or staking offering could be observed to support the Flare/FXRP-themed naming.

Regulatory Verification Notes

No licence, registration number or regulated-entity status could be tied to the site. No operating company is established, and the ownership trail shows incomplete registrant details, so the real-world operator remains unidentified. Operator identity is unverified, and the legitimacy of any financial or token-related activity cannot be inferred. A missing licence would be only a verification gap on its own. Here it adds to an elevated-risk reputation picture, and no third-party broker intelligence matched the domain. The valid but low-assurance encryption certificate shows only that the connection is encrypted. It says nothing about who runs the site. Evidence:

• Registration record: registrar is Global Domain Group LLC, with the registration running to 2027-05-09.
• Transport encryption: TLS certificate issued by YE1 (domain-validated, DV), valid to 2026-12-03 with about 38 days remaining. DV confirms domain control only, not organisational identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• No third-party broker record matched the domain.

What to Verify Next

Before any engagement, the Flare Network or FXRP project's official channels should be consulted to confirm whether this domain is an endorsed property. Those channels are the project's own documentation and its verified social accounts, reached independently rather than through links on this site. If the site claims to represent a company or service, its licensing status and legal entity should be confirmed with the relevant financial regulator or business registry. The detection status should be re-checked with the major reputation services, since a compromised or newly flagged domain can change status. Official support and contact channels should be confirmed offline or through the project's own listing. Evidence:

• The domain name pairs a token label with a network name but shows no verifiable tie to either project.
• The domain's recent creation means no established record exists against which to compare it.
• Active detections mean any current claim of legitimacy needs independent corroboration.

Summary Verdict

The available evidence supports a high-risk assessment. Confirmed adverse reputation findings dominate a profile that is otherwise young and unattributed. The harmless behaviour seen in testing does not outweigh them. The operator's real-world identity is not established, and the site cannot be treated as a legitimate or endorsed property of the projects its name evokes.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed IP addresses are edge nodes. The origin server was not observable, so hosting cannot be independently verified. That limit also means content could be swapped quickly behind the edge. The edge presence is a mitigating factor only and gives no assurance of legitimacy. Cloudflare serves benign and malicious sites alike, and no abuse reports were recorded against the edge addresses.

Closing Assessment

The site should not be used for login, wallet connection, credential entry, token approvals or any payment or financial activity. Any interaction should be limited to passive, read-only viewing from an isolated environment. Anyone who has already interacted with it should rotate affected credentials and review and revoke wallet permissions.