xpmrlusd[.]com

This domain, xpmrlusd.com, has been assessed as a high-risk generic phishing threat. The site impersonates the Ripple RLUSD Priority Allocation Program, a specific lure designed to steal cryptocurrency credentials or personal information from users expecting a legitimate token distribution. PhishDestroy assigns this a high risk level due to the active nature of the scam and its targeted approach.

Technical indicators paint a clear picture: VirusTotal shows 1 of 95 security vendors flagging the domain, and it currently appears on 4 security blocklists. The domain was created on May 26, 2026, a very recent date that aligns with many phishing campaigns. It resolves to IP address 188.114.96.3 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with malicious domains. The SSL certificate is issued by Let's Encrypt (E7), which provides the appearance of legitimacy but does not indicate safety. These data points together confirm the domain's malicious intent.

Users who encounter xpmrlusd.com should absolutely not interact with it. Do not click any links, download files, or enter any personal, financial, or cryptocurrency-related information. If credentials were already entered, change passwords immediately and enable multi-factor authentication on affected accounts. Report the domain to relevant authorities or security platforms. PhishDestroy recommends blocking the domain at the network level and educating users about phishing red flags, such as urgent allocation programs and mismatched URLs.