xwallet-chain[.]app

This domain, xwallet-chain.app, poses as a legitimate Binance wallet service to deceive users into connecting their cryptocurrency wallets. The site is designed to execute crypto drainer attacks, where malicious scripts automatically transfer digital assets from victims' wallets to attacker-controlled addresses without consent. Users encountering this domain may be tricked into entering recovery phrases, private keys, or authorizing transactions under false pretenses, leading to irreversible financial loss. Analysis indicates the domain was registered on March 13, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3 and has been flagged by 10 out of 95 security vendors on VirusTotal. Additional indicators include its presence in two AlienVault OTX threat intelligence pulses and its appearance on one security blocklist. The page title, 'X Wallet — The Safest Crypto & Web3 Gateway for Digital Assets,' mimics legitimate branding to enhance credibility and lower user suspicion. If you visited xwallet-chain.app or interacted with its content, immediately disconnect any connected wallets from the site. Revoke all active session permissions using a trusted wallet management tool. Scan your device for malware using updated security software to detect any secondary payloads. Monitor your cryptocurrency wallets for unauthorized transactions and transfer remaining assets to a new, secure wallet if compromise is suspected. Report the incident to relevant financial and cybersecurity authorities to assist in tracking and mitigating further threats.