allocation-xaman[.]app
Category: Cryptocurrency
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of allocation-xaman[.]app
This website appears to present itself as a promotional landing page related to Xaman, a cryptocurrency wallet focused on the XRP Ledger and Xahau ecosystem. The page headline advertises a live “airdrop” and invites visitors to claim an “XRPL allocation,” while the metadata describes Xaman as a self-custody wallet. The visible navigation links to sections such as Security, Developers, Cards, Ecosystem, Blog, and Help, which suggests the page is styled to resemble a product or campaign page for a crypto service.
Based on the domain name, allocation-xaman[.]app, this is not the primary xaman.app domain but a separate, newly registered domain that incorporates the Xaman brand name. The page also references related domains such as xaman.app, xumm.app, xrpl-labs.com, and help.xaman.app, which may indicate an attempt to associate itself with the broader Xaman/XRPL ecosystem. Because the site centers on wallet access and token allocation claims, it falls within the cryptocurrency category and may involve sensitive user actions such as connecting a wallet or authorizing transactions.
Safety Assessment for allocation-xaman[.]app
This domain shows several cautionary indicators at the time of this scan. It was flagged by 4 out of 91 security engines, with classifications including suspicious, spam, and phishing. In addition, the domain is only 1 day old and has no established popularity ranking, which can increase uncertainty because newly created domains are commonly used for short-lived campaigns and impersonation attempts. The page content also promotes an airdrop-style claim flow, a pattern frequently associated with crypto-related social engineering.
The domain name closely resembles the Xaman brand while using a separate structure, which may indicate a look-alike site rather than an official primary domain. Although the malware scan did not detect malicious files at the time of analysis and blacklist checks were largely clean, one referenced domain was marked suspicious in the scan context. Taken together, the combination of a very new registration, partial security-engine detections, and a crypto airdrop claim theme suggests elevated risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Canada. Nameservers are also on Cloudflare, which is common for performance and DDoS protection. DNSSEC appears to be unsigned, which is not unusual but does mean DNS responses do not benefit from that additional integrity layer.
No malicious files were identified by the malware scan, and no external links or iframes were flagged in the provided crawl data. However, the domain's extremely recent creation date, lack of ranking history, and the presence of a suspiciously themed crypto allocation page are notable concerns from a technical risk perspective, even though transport encryption itself appears properly configured.
Share your experience with this website. Was it safe? Did you encounter any issues?