xaman-share[.]us

xaman-share.us emerges as a phishing domain with no VirusTotal detections, highlighting its recent entry into the threat landscape. Detected by PhishDestroy, it exploits the critical 24-72 hour window between domain registration and antivirus database updates. This domain is already listed on PhishDestroy's blocklist, demonstrating proactive threat management.

Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, xaman-share.us is hosted on IP 104.21.55.225, operated by Cloudflare, Inc. in the US. The domain employs SSL encryption issued by Let's Encrypt, which is often used by malicious actors to lend credibility to phishing sites. The platform risk score of 63/100 indicates a moderate threat level, warranting attention from security teams.

The lack of VirusTotal detections should not be misconstrued as safety. Instead, it underscores the domain's freshness and potential for exploitation. Phishing domains like xaman-share.us are adept at capitalizing on the lag in detection systems, making early identification crucial. Organizations must remain alert to such domains and incorporate them into their security protocols to mitigate risks effectively.