Is xrdonkeys.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

XRDonkeys is a single-page promotional website that presents itself as an NFT allocation campaign. Its page title announces that an allocation is "live" and invites visitors to claim "$PMSL" tokens. The apparent purpose is to drive visitors into a token-claim or allocation flow. Sites built on this model usually monetise through visitor engagement with token claims, so the commercial mechanism behind the offer is unclear.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily against the site. The domain is blacklisted. Multiple independent security engines classify it as malicious, and three tier-one security vendors are among them. The reputation checks also corroborate this listing. The listing is decisive and is not offset by the site's otherwise unremarkable technical hygiene. Sandbox observation of the homepage adds to the concern. About seven in ten of the external requests the page made went to third-party destinations, and all three outbound data submissions went to non-whitelisted hosts. The page also threw several console errors during loading. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms or content cloaking, so none of these is asserted here. The "claim your tokens" framing, urgency language such as "allocation live", and brand-like naming are the pattern typically used to funnel visitors into credential or wallet-approval flows. No conflicting legal-entity names were found, so there is no identity contradiction. The risk comes from the reputation record and the outbound data flows. Evidence:

• Homepage: the title reads "NFT Allocation Live | Claim Your $PMSL Tokens", a token-claim lure with no named issuer or project documentation.
• Domain registration: created 2026-07-02 (~0.32 years old), so the domain is only months old and has no established track record.
• Web archive: 1 snapshot, captured 2026-07-06, spanning 1 year, so there is no meaningful history.
• Sandbox behaviour: 3 outbound POST requests to non-whitelisted external hosts, with a peak external request share of 71.4%, and 3 console errors across 3 runs.

Regulatory Verification Notes

The homepage gives no clear identification of the operating entity, and no licensing or registration information supports the token-allocation offer. Operator identity could not be independently connected to any real-world brand or person, so no legitimacy claim can be made. Token distributions and NFT allocations can carry securities, consumer-protection and anti-money-laundering obligations in many jurisdictions, and nothing on the site shows these have been addressed. No third-party broker or regulator record matched this site. The absence of a match is neutral. The negative position rests on the threat-intelligence record above, not on the missing disclosures themselves. Evidence:

• Homepage: no named company, registration number, licensing statement or governance disclosure accompanies the token-claim offer.
• Registrar: the domain is registered through NICENIC International Group Co., Limited.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-11-28 with 33 days remaining. A DV certificate confirms control of the domain, not the operator's identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any claim of an official XRDonkeys or $PMSL project should be checked against the project's announcements on channels reached independently of this site, such as established social accounts or a known exchange or marketplace listing. Contact channels should be confirmed through an independent route and not taken from this page. The token contract and allocation mechanics should be checked in a public blockchain explorer. Any operator licensing or registration claim should be confirmed with the relevant financial or consumer regulator. Evidence:

• Homepage: the "claim your $PMSL tokens" call to action should be traced to an independently confirmed project source before any interaction.
• Sandbox record: the three outbound submissions to non-whitelisted hosts mean that data entered on the page may reach unrelated third parties.
• Domain record: the domain was created 2026-07-02, so any claim of long-standing operation is inconsistent with its age.

Summary Verdict

The overall posture is high-risk. The site is judged unsafe for any sensitive or financial interaction. Convergence of an active multi-engine blacklisting, a very recent domain with no meaningful history, and unexplained third-party data flows outweighs the routine technical hygiene present. The operator's real-world identity is unestablished, so no legitimacy conclusion is supported.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host could not be independently identified. This is a mitigating factor only. The transport certificate is valid and issued by a recognised authority, but protective infrastructure does not offset the reputation record. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps.

Closing Assessment

Read-only viewing is the most that is appropriate. Logging in, entering credentials, connecting a wallet, approving token transactions and making any payment should be avoided entirely. Anyone who has already interacted with the site should review wallet approvals, revoke any granted permissions and change reused credentials.