Is participate-xrpl.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

participate-xrpl.xyz is a newly created website whose name suggests a participation or onboarding flow tied to the XRP Ledger ecosystem. When automatically accessed, it showed only a Cloudflare interstitial page titled "Suspected Phishing", and no products, token offers or business model were readable. Its purpose cannot be established from its content, and the only visible message is a security warning.

Scam/Impersonation Risk

Material contradictions are present, and this is a clearly cautionary assessment. The domain is blacklisted: independent threat-intelligence sources currently flag it, and a Cloudflare interstitial labels it as suspected phishing. Several security engines return malicious verdicts, including two tier-one security vendors. No brand impersonation or conflicting legal identities were confirmed, because no page content was readable. The risk comes from the reputation record, not from analysed page claims. The domain name pairs a call to "participate" with a well-known ledger brand. That is a common lure pattern, so the site should be treated as a possible credential or wallet-capture front until shown otherwise. Browser behaviour adds some weight. Most outbound traffic went to third-party destinations, the page produced a high volume of script errors, and the page changed substantially after interaction. These are noteworthy but not conclusive, and no wallet-connection or clipboard-manipulation activity was observed. Evidence:

• Homepage: access was met with a Cloudflare bot challenge returning a 403 status and the title "Suspected Phishing | Cloudflare", with only a short block of text rendered.
• External reputation: 8 engines flagged the domain as malicious and 2 as suspicious, including two tier-one security vendors.
• Domain provenance: registered 2026-07-30 (~0.25 years old), so the site has no track record to offset the detections.
• Homepage behaviour: 35 external XHR/fetch requests and 9 external POST requests across 3 sandbox runs, up to ~96% of traffic going to external hosts, and 36 console errors.

Regulatory Verification Notes

No legal, terms, privacy or about pages were reachable, so no operator name, jurisdiction, licence or registration number could be assessed. Ownership is opaque and no regulated status is attributable to the site. Any claim of authorisation or regulated activity would need independent confirmation before it carried weight. The domain is registered through NiceNIC International Group Co., Limited. That is an ordinary commercial registrar and says nothing about who the operator is. Third-party broker databases hold no record of this domain. That is a neutral signal and does not indicate regulatory standing. Evidence:

• Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-07-30.
• The transport certificate is a domain-validated certificate issued by WE1, valid to 2026-12-26. It confirms encryption only and does not identify the operator.
• No broker-directory match exists for the domain, so there is no third-party regulatory or reputational record to rely on.

What to Verify Next

Before any interaction, confirm whether the sender or campaign that led to this domain is genuine. Use the official channels of the XRP Ledger project or the organisation the site appears to represent, reached through independently sourced addresses and not through links pointing here. Check the domain against the organisation's own published list of official properties. If a claim of licensing or authorisation surfaces, confirm it directly with the relevant registry. Anyone who has already visited, connected a wallet or entered credentials should treat those assets and accounts as exposed and review them promptly. Evidence:

• Homepage: no operator identity, official-channel reference or licence claim was visible against which the site could be validated.
• The domain's creation date falls within the last few months, so no long-standing public reference to it exists to cross-check.
• Reputation records already link the domain to phishing, which makes independent confirmation of origin a precondition for any contact.

Summary Verdict

The site is assessed as high risk, with decisive and corroborated adverse reputation findings supported by a very recent registration and an unverified operator. The available evidence does not support treating it as a legitimate service, and no mitigating factor is strong enough to change that posture.

Infrastructure Integrity

The site is served from AS13335, operated by Cloudflare, Inc. (US), behind Cloudflare's CDN/WAF. All four observed addresses are edge nodes, and the origin host could not be independently identified. Protective infrastructure of this kind is a mitigating factor only, because it is available to any customer and cannot offset the adverse reputation record. Cloudflare's own phishing interstitial is the clearest sign that the platform has already flagged this property.

Closing Assessment

The site should not be used for logins, credential entry, wallet connections or any financial action. Anyone who reached it through an unsolicited message, advertisement or social post should leave without interacting and report the originating link to the platform where it appeared.