xmagnetic[.]us

The domain xmagnetic.us is identified as a high-risk generic phishing threat, masquerading as a legitimate XRP DeFi protocol platform. It falsely claims to offer services such as swapping, bridging, staking, and lending on the XRP Ledger (XRPL). The site was designed to deceive users into believing they are interacting with a secure DeFi service, potentially leading to the theft of sensitive information or digital assets.

Evidence supporting this identification includes a VirusTotal analysis, where 16 out of 95 security vendors flagged xmagnetic.us as malicious. The domain's infrastructure incorporated technologies such as Cloudflare Browser Insights and HTTP/3, and it had an SSL certificate issued by Let's Encrypt. It resolved to IP address 104.21.3.165 before being taken offline. The domain has been blocked by major security systems, including MetaMask, PhishDestroy, and SEAL, and it appears on 3 security blocklists, indicating widespread recognition of its malicious nature.

Users who have visited this domain are advised to immediately change any passwords or credentials they might have entered. It is also crucial to monitor financial accounts for any unauthorized transactions. Ensuring that security software is up to date and scanning for potential malware infections is recommended. Additionally, reporting such phishing attempts to appropriate cybersecurity platforms can aid in preventing future incidents, contributing to the broader effort against phishing threats.