xrpl-xaman.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of xrpl-xaman.com
The domain xrpl-xaman.com appears to present itself as a cryptocurrency airdrop page related to Xaman and the XRP Ledger ecosystem. Its page title and on-page text promote a "XAM Airdrop" and encourage visitors to connect a wallet to check whether they qualify for a token allocation. The visual design and wording suggest it is targeting users interested in XRP, Xahau, and Xaman-branded wallet services.
Based on the domain name, page metadata, and screenshot, the site appears to imitate or closely reference the Xaman brand rather than operate from an obvious official brand domain. The page uses branding elements associated with Xaman and frames the offer as a limited-time token distribution, which is a common pattern used in crypto wallet-connection campaigns. The domain itself is newly registered and does not appear to have an established web presence based on the available data.
Safety Assessment for xrpl-xaman.com
This website shows multiple high-risk indicators at the time of this scan. It was flagged by 15 security engines, and blacklist data indicates listings associated with phishing and social-engineering activity. The domain also closely resembles the Xaman brand while using a different domain structure, which may indicate a look-alike site intended to attract users who expect an official Xaman-related page.
Additional context increases the level of concern: the domain is only 1 day old, it is not ranked in major traffic data, and the page promotes a cryptocurrency airdrop that asks users to connect a wallet. That combination is commonly associated with credential theft or wallet-draining attempts in the crypto space. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds minor caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure and uses a valid Let's Encrypt SSL certificate, which means the connection appears encrypted in transit. However, a valid certificate only confirms HTTPS availability and does not by itself indicate legitimacy. The domain uses Cloudflare nameservers, resolves to a Cloudflare IP in Canada, and DNSSEC appears to be unsigned.
From a technical-risk perspective, the strongest concerns are not the TLS setup but the surrounding indicators: very recent domain registration, multiple phishing detections, and references to external infrastructure including hosted app endpoints and verification-style subpages. Those factors may be consistent with a short-lived campaign site at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?