---
title: "Is participate-xrpl.xyz a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "participate-xrpl.xyz"
verdict: "Critical Risk"
title: "Is participate-xrpl.xyz a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/participate-xrpl.xyz
assessed: 2026-10-29
---

# Is participate-xrpl.xyz a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** participate-xrpl.xyz shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-29 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 8 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 3 months old (Most scam domains are under a year old) | Risk |
| Certificate | Encrypted connection (Issued by WE1) | Noted |
| Hosted by | CLOUDFLARENET (Server in US) | Noted |

## The page as captured


![Screenshot of the participate-xrpl.xyz homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/participate-xrpl.xyz/screenshots/first.png)

_What participate-xrpl.xyz served when TrustSniffer captured it on 2026-10-29. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

participate-xrpl.xyz is a newly created website whose name suggests a participation or onboarding flow tied to the XRP Ledger ecosystem. When automatically accessed, it showed only a Cloudflare interstitial page titled "Suspected Phishing", and no products, token offers or business model were readable. Its purpose cannot be established from its content, and the only visible message is a security warning.


### Scam/Impersonation Risk

Material contradictions are present, and this is a clearly cautionary assessment. The domain is **blacklisted**: independent threat-intelligence sources currently flag it, and a Cloudflare interstitial labels it as suspected phishing. Several security engines return malicious verdicts, including two tier-one security vendors. No brand impersonation or conflicting legal identities were confirmed, because no page content was readable. The risk comes from the reputation record, not from analysed page claims. The domain name pairs a call to "participate" with a well-known ledger brand. That is a common lure pattern, so the site should be treated as a possible credential or wallet-capture front until shown otherwise. Browser behaviour adds some weight. Most outbound traffic went to third-party destinations, the page produced a high volume of script errors, and the page changed substantially after interaction. These are noteworthy but not conclusive, and no wallet-connection or clipboard-manipulation activity was observed. Evidence:

- Homepage: access was met with a Cloudflare bot challenge returning a 403 status and the title "Suspected Phishing | Cloudflare", with only a short block of text rendered.
- External reputation: 8 engines flagged the domain as malicious and 2 as suspicious, including two tier-one security vendors.
- Domain provenance: registered 2026-07-30 (~0.25 years old), so the site has no track record to offset the detections.
- Homepage behaviour: 35 external XHR/fetch requests and 9 external POST requests across 3 sandbox runs, up to ~96% of traffic going to external hosts, and 36 console errors.

### Regulatory Verification Notes

No legal, terms, privacy or about pages were reachable, so no operator name, jurisdiction, licence or registration number could be assessed. Ownership is opaque and no regulated status is attributable to the site. Any claim of authorisation or regulated activity would need independent confirmation before it carried weight. The domain is registered through NiceNIC International Group Co., Limited. That is an ordinary commercial registrar and says nothing about who the operator is. Third-party broker databases hold no record of this domain. That is a neutral signal and does not indicate regulatory standing. Evidence:

- Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-07-30.
- The transport certificate is a domain-validated certificate issued by WE1, valid to 2026-12-26. It confirms encryption only and does not identify the operator.
- No broker-directory match exists for the domain, so there is no third-party regulatory or reputational record to rely on.

### What to Verify Next

Before any interaction, confirm whether the sender or campaign that led to this domain is genuine. Use the official channels of the XRP Ledger project or the organisation the site appears to represent, reached through independently sourced addresses and not through links pointing here. Check the domain against the organisation's own published list of official properties. If a claim of licensing or authorisation surfaces, confirm it directly with the relevant registry. Anyone who has already visited, connected a wallet or entered credentials should treat those assets and accounts as exposed and review them promptly. Evidence:

- Homepage: no operator identity, official-channel reference or licence claim was visible against which the site could be validated.
- The domain's creation date falls within the last few months, so no long-standing public reference to it exists to cross-check.
- Reputation records already link the domain to phishing, which makes independent confirmation of origin a precondition for any contact.

### Summary Verdict

The site is assessed as high risk, with decisive and corroborated adverse reputation findings supported by a very recent registration and an unverified operator. The available evidence does not support treating it as a legitimate service, and no mitigating factor is strong enough to change that posture.


### Infrastructure Integrity

The site is served from AS13335, operated by Cloudflare, Inc. (US), behind Cloudflare's CDN/WAF. All four observed addresses are edge nodes, and the origin host could not be independently identified. Protective infrastructure of this kind is a mitigating factor only, because it is available to any customer and cannot offset the adverse reputation record. Cloudflare's own phishing interstitial is the clearest sign that the platform has already flagged this property.


### Closing Assessment

The site should not be used for logins, credential entry, wallet connections or any financial action. Anyone who reached it through an unsolicited message, advertisement or social post should leave without interacting and report the originating link to the platform where it appeared.


_Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Hosting and network
- The domain was registered between three and six months ago. (Hosting and network `rule:DNS_YOUNG_6M`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of participate-xrpl.xyz.

- The request stayed on participate-xrpl.xyz. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-30. (Noted)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:3e39 |
| Name servers | ELEANOR.NS.CLOUDFLARE.COM, RENAN.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-26 |
| Domain age | 0.25 years (continuous registration) |
| Domain expiry | 2027-07-30 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 8 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about participate-xrpl.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [xaman-promo.xyz](https://trustsniffer.com/report/xaman-promo.xyz), another .xyz site assessed as critical-risk (Critical Risk, 5/100)
- [zipcoin-proposal.xyz](https://trustsniffer.com/report/zipcoin-proposal.xyz), another .xyz site assessed as critical-risk (Critical Risk, 20/100)
- [pumpfunsecuingnow.xyz](https://trustsniffer.com/report/pumpfunsecuingnow.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [amemecoin.xyz](https://trustsniffer.com/report/amemecoin.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [hyperfoundationsnapshots.xyz](https://trustsniffer.com/report/hyperfoundationsnapshots.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [whitelisst.xyz](https://trustsniffer.com/report/whitelisst.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [jumperreward.xyz](https://trustsniffer.com/report/jumperreward.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [bitcoinhyper-live.xyz](https://trustsniffer.com/report/bitcoinhyper-live.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [gme-bull.xyz](https://trustsniffer.com/report/gme-bull.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [indexlaunch.live](https://trustsniffer.com/report/indexlaunch.live), another site assessed as critical-risk (Critical Risk, 1/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/participate-xrpl.xyz) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/participate-xrpl.xyz · assessed 2026-10-29.*