peersystlabs[.]com

This domain poses as an official allocation portal for RLUSD and XRP tokens, a common tactic used in cryptocurrency phishing schemes. Visitors are likely presented with fake investment opportunities, token claims, or wallet connection prompts designed to steal credentials or private keys. The site mimics legitimate partnerships (Peersyst, Ripple, Axelar) to gain trust, but the content is fabricated to deceive users into disclosing sensitive information or transferring funds to attacker-controlled addresses. Analysis indicates this domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. As of the latest scan, 19 out of 95 security vendors on VirusTotal flag peersystlabs.com as malicious, with detections categorized under phishing. The domain appears on four security blocklists and is actively blocked by multiple browser-based security tools. Infrastructure analysis reveals the site resolves to IP address 172.67.144.132, a Cloudflare-assigned address often used to obfuscate hosting origins. The SSL certificate, issued by Google Trust Services, is valid but does not mitigate the underlying threat. If you visited peersystlabs.com, immediately disconnect any connected wallets or accounts and revoke permissions granted to the site. Scan your device for malware using updated security software, as phishing pages may deploy additional payloads. Monitor linked accounts for unauthorized transactions and report the domain to relevant platforms (e.g., cryptocurrency exchanges, wallet providers) to prevent further exploitation. Avoid interacting with any content or links associated with this domain, and verify official announcements only through trusted sources such as Ripple’s or Axelar’s verified channels.