Is xmagnetics.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

xMagnetic presents itself as a decentralized-finance protocol on the XRP Ledger. Its page title advertises swapping, staking, bridging and earning a token called XMR. The site is a single-page web application served from a free subdomain on a shared application-hosting platform, not from an independently registered domain. It appears to be a crypto-asset trading and yield front end that invites visitors to move digital assets through its interface.

Scam/Impersonation Risk

Contradictory signals are present, and they are the decisive factor in this assessment. Several major security engines independently flag the site, and a leading browser-protection service classifies it under the social-engineering (deceptive-site) category. Together these amount to a confirmed blacklisting from multiple independent sources. The reputation risk is therefore assessed as high, and the platform's protections do not offset it. No conflicting legal entities were found, and no direct brand impersonation was established. The danger comes from external threat detections, not from competing identity claims. The product mix the page advertises (swap, stake, bridge, earn) is the kind of surface through which asset-drain and deceptive-site schemes typically operate. In sandbox testing, all of the page's outbound data submissions went to destinations outside the platform's recognized services, and a large share of its network traffic was third-party. No wallet-connection prompts, wallet-drainer behavior, clipboard tampering, hidden forms or content cloaking were observed in the sessions run, so the specific mechanism behind the detections is unconfirmed. Abuse reports exist against a shared edge address of the hosting platform. They are discounted as reputational evidence because that address serves many unrelated tenants and carries no reputation penalty of its own. Evidence:

• Homepage: flagged as malicious by a substantial number of independent security engines, including four major tier-one vendors, with a social-engineering classification from the browser-protection service.
• Homepage behavior: three of three external POST requests went to non-whitelisted destinations, and about 80% of observed activity was external.
• Homepage behavior: no wallet-connect, drainer, clipboard-hijack, hidden-form or cloaking activity across three successful sandbox runs.
• Hosting infrastructure: 87 abuse reports on the shared edge IP 216.198.79.3, attributed to the shared provider and discounted.

Regulatory Verification Notes

The evidence identifies no licensing, registration or regulatory standing for the operator, and the real-world entity behind the site has not been independently connected to any person or company. The site does not appear in third-party broker-reputation records, which is a neutral data point and neither a clearance nor a warning. A protocol that offers token swaps, staking and cross-chain bridging would normally be expected to state who operates it and under what jurisdiction. That expectation is a transparency gap for the next-steps list. By itself it is not evidence of fraud. The service's use of a platform-issued subdomain gives it no standalone brand domain that could be tied to a legal entity. Evidence:

• Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), ARIN registry, US.
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27 (32 days remaining). A valid DV certificate confirms encryption only and says nothing about operator identity.
• Protocol directories: the DeFi protocol directory checked has no listing for this protocol, so no TVL figure could be recorded.

What to Verify Next

Before any engagement, confirm through the official channels of the XRP Ledger project and its documentation whether this protocol and its XMR token exist and which domain is canonical. Check any regulator registry in the jurisdiction the operator claims, and treat the lack of a listed operator as unresolved. Confirm official support and contact channels through an independent, offline route and not through links on the site. Security teams should also check the flagged status with the engines and browser-protection services concerned and see whether it has been remediated or reviewed. Evidence:

• Homepage: the title advertises swap, stake, bridge and earn functions without naming an operator in the captured page signals.
• Threat listing: the social-engineering classification and the multi-engine detections were current at the time of analysis.
• Hosting infrastructure: the free platform subdomain means the canonical brand domain cannot be confirmed from the site itself.

Summary Verdict

The site carries an elevated, high-risk posture, driven by consistent external threat detections that outweigh every neutral or protective technical factor. Its legitimacy cannot be established, and its real-world operator remains unverified. Only passive, read-only observation is consistent with the evidence.

Infrastructure Integrity

The site runs on a major shared application-hosting platform with a global CDN/WAF, resolving to six edge addresses, all within the Amazon network. The true origin server was not observable, so independent verification of the underlying host, and of any rapid content swaps behind the edge, is not possible. Encryption and a stable, healthy response profile are mitigating factors only. They do not offset the threat detections.

Closing Assessment

Do not log in, connect a wallet, enter credentials or move funds through this site, and do not download anything from it. Reconsider only if the threat listings are cleared and the operator is independently confirmed.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.