--- title: "Is xmagnetics.vercel.app a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "xmagnetics.vercel.app" verdict: "Critical Risk" title: "Is xmagnetics.vercel.app a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/xmagnetics.vercel.app assessed: 2026-10-25 --- # Is xmagnetics.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** xmagnetics.vercel.app shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-25 by automated analysis. Classification confidence 55%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 18 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Listed as unsafe (Google) | Risk | | Abuse reports on the host | 0% confidence (AbuseIPDB, 87 reports; shared hosting inflates reports) | Clear | | Domain age | Not available (No registration record was returned) | Noted | | Certificate | Encrypted connection (Issued by WR1) | Noted | | Hosted by | AMAZON-02 (Server in US) | Noted | ## The page as captured ![Screenshot of the xmagnetics.vercel.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xmagnetics.vercel.app/screenshots/first.png) _What xmagnetics.vercel.app served when TrustSniffer captured it on 2026-10-25. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. xMagnetic presents itself as a decentralized-finance protocol on the XRP Ledger. Its page title advertises swapping, staking, bridging and earning a token called XMR. The site is a single-page web application served from a free subdomain on a shared application-hosting platform, not from an independently registered domain. It appears to be a crypto-asset trading and yield front end that invites visitors to move digital assets through its interface. ### Scam/Impersonation Risk Contradictory signals are present, and they are the decisive factor in this assessment. Several major security engines independently flag the site, and a leading browser-protection service classifies it under the social-engineering (deceptive-site) category. Together these amount to a **confirmed blacklisting** from multiple independent sources. The reputation risk is therefore assessed as high, and the platform's protections do not offset it. No conflicting legal entities were found, and no direct brand impersonation was established. The danger comes from external threat detections, not from competing identity claims. The product mix the page advertises (swap, stake, bridge, earn) is the kind of surface through which asset-drain and deceptive-site schemes typically operate. In sandbox testing, all of the page's outbound data submissions went to destinations outside the platform's recognized services, and a large share of its network traffic was third-party. No wallet-connection prompts, wallet-drainer behavior, clipboard tampering, hidden forms or content cloaking were observed in the sessions run, so the specific mechanism behind the detections is unconfirmed. Abuse reports exist against a shared edge address of the hosting platform. They are discounted as reputational evidence because that address serves many unrelated tenants and carries no reputation penalty of its own. Evidence: - Homepage: flagged as malicious by a substantial number of independent security engines, including four major tier-one vendors, with a social-engineering classification from the browser-protection service. - Homepage behavior: three of three external POST requests went to non-whitelisted destinations, and about 80% of observed activity was external. - Homepage behavior: no wallet-connect, drainer, clipboard-hijack, hidden-form or cloaking activity across three successful sandbox runs. - Hosting infrastructure: 87 abuse reports on the shared edge IP 216.198.79.3, attributed to the shared provider and discounted. ### Regulatory Verification Notes The evidence identifies no licensing, registration or regulatory standing for the operator, and the real-world entity behind the site has not been independently connected to any person or company. The site does not appear in third-party broker-reputation records, which is a neutral data point and neither a clearance nor a warning. A protocol that offers token swaps, staking and cross-chain bridging would normally be expected to state who operates it and under what jurisdiction. That expectation is a transparency gap for the next-steps list. By itself it is not evidence of fraud. The service's use of a platform-issued subdomain gives it no standalone brand domain that could be tied to a legal entity. Evidence: - Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), ARIN registry, US. - Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27 (32 days remaining). A valid DV certificate confirms encryption only and says nothing about operator identity. - Protocol directories: the DeFi protocol directory checked has no listing for this protocol, so no TVL figure could be recorded. ### What to Verify Next Before any engagement, confirm through the official channels of the XRP Ledger project and its documentation whether this protocol and its XMR token exist and which domain is canonical. Check any regulator registry in the jurisdiction the operator claims, and treat the lack of a listed operator as unresolved. Confirm official support and contact channels through an independent, offline route and not through links on the site. Security teams should also check the flagged status with the engines and browser-protection services concerned and see whether it has been remediated or reviewed. Evidence: - Homepage: the title advertises swap, stake, bridge and earn functions without naming an operator in the captured page signals. - Threat listing: the social-engineering classification and the multi-engine detections were current at the time of analysis. - Hosting infrastructure: the free platform subdomain means the canonical brand domain cannot be confirmed from the site itself. ### Summary Verdict The site carries an elevated, high-risk posture, driven by consistent external threat detections that outweigh every neutral or protective technical factor. Its legitimacy cannot be established, and its real-world operator remains unverified. Only passive, read-only observation is consistent with the evidence. ### Infrastructure Integrity The site runs on a major shared application-hosting platform with a global CDN/WAF, resolving to six edge addresses, all within the Amazon network. The true origin server was not observable, so independent verification of the underlying host, and of any rapid content swaps behind the edge, is not possible. Encryption and a stable, healthy response profile are mitigating factors only. They do not offset the threat detections. ### Closing Assessment Do not log in, connect a wallet, enter credentials or move funds through this site, and do not download anything from it. Reconsider only if the threat listings are cleared and the operator is independently confirmed. _Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The page sent data to a destination TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_POSTS`) ### 03 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ### Signals weighed against the site - AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of xmagnetics.vercel.app. - The request stayed on xmagnetics.vercel.app. It was not redirected to another domain. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 216.198.79.3 | | Name servers | Not available | | CDN / edge network | Detected | | Resolved IP addresses | 6 | | Edge IP addresses | 6 | | Likely origin IP addresses | 0 | | SSL issuer | WR1 | | SSL expiry | 2026-11-27 | | Domain age | Not available (no registration date was returned) | | Domain expiry | Not available | | Archive first seen | Not available | | Archive snapshots | Not counted (archive lookup incomplete) | | Reputation | VirusTotal: 18 flagged \| AbuseIPDB: 0% confidence, 87 reports \| Google Safe Browsing: 1 match | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about xmagnetics.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [v2-paraswap.vercel.app](https://trustsniffer.com/report/v2-paraswap.vercel.app), a similar name (Critical Risk, 0/100) - [sendusdt-2.vercel.app](https://trustsniffer.com/report/sendusdt-2.vercel.app), a similar name (Critical Risk, 5/100) - [arcadepadapp.vercel.app](https://trustsniffer.com/report/arcadepadapp.vercel.app), a similar name (Critical Risk, 16/100) - [send-usdt-1-chi.vercel.app](https://trustsniffer.com/report/send-usdt-1-chi.vercel.app), a similar name (Critical Risk, 5/100) - [mmmm-lilac.vercel.app](https://trustsniffer.com/report/mmmm-lilac.vercel.app), a similar name (Critical Risk, 5/100) - [getblockaml.vercel.app](https://trustsniffer.com/report/getblockaml.vercel.app), a similar name (Critical Risk, 0/100) - [aml-wallet-scanner.vercel.app](https://trustsniffer.com/report/aml-wallet-scanner.vercel.app), a similar name (Critical Risk, 21/100) - [trustwallet-secure-check.vercel.app](https://trustsniffer.com/report/trustwallet-secure-check.vercel.app), a similar name (Critical Risk, 5/100) - [streamlivesol.xyz](https://trustsniffer.com/report/streamlivesol.xyz), another site assessed as critical-risk (Critical Risk, 5/100) - [amltrc.vercel.app](https://trustsniffer.com/report/amltrc.vercel.app), a similar name (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites) - [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site) - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) --- *Source: [TrustSniffer](https://trustsniffer.com/report/xmagnetics.vercel.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xmagnetics.vercel.app · assessed 2026-10-25.*