If this isn't a scam what could it be anyway?
Usually tokens that have domains such as .io and others are dusting tokens that are ready to access your wallet when you transact with this dusting token. Your wallet is currently vulnerable to hacker attacks who can access your wallet, one solution is to replace your wallet and be careful in providing wallet data or connecting to dapps.
The trick is every receiver will try to sell and that's when you will be f**ked up, in this crypto haven nothing comes for free, you have to work your ass up to make some gains and rewards, go after only what you sweat and worked for.
Logically, no one wants to give a lot of money for free, cryptocurrency is not heaven, and we must continue to be careful in carrying out cryptocurrency activities.