Is proposals-xstocks.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as Doppler Finance, a decentralised-finance platform offering on-chain vaults, yield-distribution services, governance voting, and institutional yield products. Its apparent operating model is to have users connect compatible wallets and supply assets to protocol vaults in pursuit of yield.

Scam/Impersonation Risk

The site has a critical interaction risk because external reputation telemetry records malicious detections and a confirmed blacklist, including coverage from more than one source. This is the decisive contradiction in the assessment. The homepage also combines wallet-based governance with XRP and RLUSD vaults, institutional “yield-as-a-service,” and proposed allocations such as “60% of yield to base depositors,” while identifying opaque value flows, high-stakes evidence gaps, and a mismatch between claims and supporting evidence. The page does not show confirmed brand impersonation or conflicting legal-entity names, but the confirmed blacklist and malicious detections are sufficient to make wallet, credential, and financial interactions unsuitable. Evidence:

• The homepage requests wallet connection for governance voting and lists XRP Vault, RLUSD Vault, and Institutional Vault services.
• The homepage presents yield-distribution mechanisms and a “60% of yield” voting proposal without visible supporting audit evidence in the supplied content.
• External reputation telemetry recorded 19 malicious detections and 2 suspicious detections, with a confirmed blacklist.
• The domain was registered in 2026 and is recorded as 0.07 years old; archival coverage consists of 1 snapshot spanning 2026–2026, with 1 year tracked.

Regulatory Verification Notes

The site’s legal and regulatory posture is not independently verified. Its own disclaimer states that the reward structures are not financial products and are not registered under securities laws, that yield figures are illustrative and based on historical data, and that rewards are not guaranteed. No licensing authority or registration number is presented in the supplied pages, leaving a material verification gap for a service that solicits wallet-connected participation and institutional yield activity. Evidence:

• The homepage disclaimer states that the rewards are not registered under securities laws and do not constitute financial advice or an offer of financial services.
• The homepage directs visitors to Docs, Terms of Service, Privacy Policy, and Disclaimer pages, but the supplied content does not establish an independently verified operating entity or regulator.
• The site is served on AS13335 by CLOUDFLARENET - Cloudflare, Inc., US.
• The transport certificate is DV, issued by YE1, and valid to 2026-12-23T12:27:28+00:00.

What to Verify Next

Before any sensitive interaction, an independent review should identify the legal operator behind the service and confirm whether the relevant jurisdiction permits the advertised activity. The technical documentation should be checked for independently verifiable smart-contract audits, custody and withdrawal mechanics, fee flows, loss-allocation rules, and the precise permissions requested by each wallet transaction. The stated terms and support channels should also be validated through an independent route rather than relying solely on links presented by the site. Evidence:

• The homepage directs users to Docs and Terms of Service, which should be checked for contract addresses, operator details, audit references, and withdrawal conditions.
• The wallet-governance interface should be tested in a segregated wallet to determine whether approval, signing, or asset-transfer permissions exceed the stated voting purpose.
• The institutional-yield presentation should be matched against an independently confirmed legal entity and applicable financial-services register.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. The available evidence does not establish a trustworthy connection to a verified real-world operator, and the confirmed external threat indicators outweigh the site’s otherwise functional presentation and standard security controls.

Infrastructure Integrity

Cloudflare CDN and WAF protection provide a legitimate defensive layer and reduce direct exposure of the origin infrastructure, but they are infrastructure safeguards rather than evidence that the operator or financial proposition is legitimate. All observed addresses were CDN edge addresses, and the origin server was not observable in this analysis.

Closing Assessment

The appropriate course is passive review only until the operator, regulatory position, contract controls, and transaction permissions have been independently established; no wallet transaction, credential submission, or transfer of funds should be authorised in the interim.