xamanpcwallet[.]com

Analysis of xamanpcwallet.com indicates that the domain was registered on May 04, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IPv4 address 64.29.17.1, which is currently associated with multiple security blocklists. The domain appears on three independent blocklists and has been explicitly flagged by PhishDestroy, MetaMask, and SEAL as a malicious actor. VirusTotal scans show that 15 out of 91 security vendors have issued detections for the domain, reinforcing its classification as a high‑risk crypto drainer.

The available intelligence does not include a page title, SSL certificate details, or HTTP response codes, leaving the exact payload and delivery mechanisms unconfirmed. No public reports from Open Threat Exchange or Google Safe Browsing are listed, and no additional contextual indicators such as associated malware families or command‑and‑control infrastructure have been disclosed. Given the combination of recent registration, dedicated registrar, single IP hosting, and multiple independent detections, the domain should be treated as actively malicious.

Defensive teams are advised to add 64.29.17.1 and the hostname xamanpcwallet.com to deny‑list rules across DNS filtering, firewall, and endpoint protection solutions. Continuous monitoring of DNS queries for the domain and periodic re‑evaluation of VirusTotal and blocklist status are recommended to capture any changes in behavior. Until further forensic analysis of the web content is performed, the domain remains a confirmed threat to cryptocurrency users and should be blocked at network perimeters.