xmagnetic[.]club

This domain, xmagnetic.club, poses as a legitimate RLUSD token allocation platform to deceive users into connecting cryptocurrency wallets. Analysis of the page title, "RLUSD — Claim Your Allocation," indicates an attempt to mimic a token distribution event, a common tactic used in crypto drainer schemes. Victims are lured into approving malicious smart contracts that siphon funds from their wallets without consent. The domain specifically targets users familiar with token airdrops or presales, exploiting their expectation of receiving free assets to execute unauthorized transactions. Infrastructure analysis reveals multiple high-risk indicators. The domain is flagged by 4 out of 95 security vendors on VirusTotal, including detections for phishing and malicious activity. It was registered on May 07, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with fraudulent domains. The domain resolves to IP address 104.21.11.6, hosted on Cloudflare’s network (AS13335), which is often leveraged to obscure the true origin of malicious infrastructure. Additionally, xmagnetic.club appears on 3 security blocklists and is actively blocked by wallet security tools and browser-based phishing filters. Users who visited xmagnetic.club or interacted with its content should immediately revoke any wallet permissions granted to the site. Audit all connected wallets for unauthorized transactions, particularly those involving token approvals or transfers. If funds were lost, report the incident to the relevant blockchain explorer and consider filing a complaint with local cybercrime authorities. Monitor accounts for suspicious activity and avoid engaging with domains promoting unsolicited token claims or airdrops, especially those registered through high-risk registrars or lacking verifiable legitimacy.