# Phishing sites impersonating Xaman PhishDestroy has recorded 54 phishing domains impersonating Xaman since 2025-09-03, 8 of them in the last 30 days. The most used registrars are NiceNIC and NICENIC; the most common TLDs are .app and .com. Open Xaman only from its official app or a saved bookmark. 54Domains, all time 8Last 30 days 32Online at last check 6Confirmed takedowns ## New domains in the last 90 days Xaman phishing domains detected per day: 10 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake Xaman site Words most often added to the brand in reported domains: xamanwallet, xam, wallet, allocation, xamanwalletdapp, xamanapptools, xamanxahau, xamandesktopwallet, xummwallet, xamandesktop. - Type the address yourself or use a bookmark; phishing links for Xaman arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Xaman will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Xaman phishing domains The 50 most recently detected domains impersonating Xaman Domain | First detected | Status at last check | Registrar | [cafe-cap.com](https://phishdestroy.io/domain/cafe-cap.com/) | 2026-10-22 | Online | Dynadot | [xam-rpl.com](https://phishdestroy.io/domain/xam-rpl.com/) | 2026-10-22 | Online | Dynadot | [x-xam.com](https://phishdestroy.io/domain/x-xam.com/) | 2026-10-22 | Online | Dynadot | [xaman-dashboard.app](https://phishdestroy.io/domain/xaman-dashboard.app/) | 2026-10-21 | Offline | NameSilo | [xam-allocation.com](https://phishdestroy.io/domain/xam-allocation.com/) | 2026-10-21 | Online | DYNADOT | [xamcore.info](https://phishdestroy.io/domain/xamcore.info/) | 2026-10-20 | Online | NICENIC | [xamstack.info](https://phishdestroy.io/domain/xamstack.info/) | 2026-10-19 | Online | NICENIC | [airdrops-xaman.app](https://phishdestroy.io/domain/airdrops-xaman.app/) | 2026-10-03 | Online | Dynadot | [xamapp.app](https://phishdestroy.io/domain/xamapp.app/) | 2026-08-22 | Online | NICENIC | [xmanliquid-globe.com](https://phishdestroy.io/domain/xmanliquid-globe.com/) | 2026-08-10 | Online | NICENIC | [xaodao.app](https://phishdestroy.io/domain/xaodao.app/) | 2026-07-01 | Online | NICENIC | [app-xaman.app](https://phishdestroy.io/domain/app-xaman.app/) | 2026-06-21 | Online | PublicDomainRegistry.com | [xamanwallet-token.pro](https://phishdestroy.io/domain/xamanwallet-token.pro/) | 2026-06-15 | Online | PublicDomainRegistry.com | [xamantoken.my](https://phishdestroy.io/domain/xamantoken.my/) | 2026-06-15 | Online | Global Domain | [xamanwallet.money](https://phishdestroy.io/domain/xamanwallet.money/) | 2026-06-15 | Offline | NICENIC | [xaman-app.online](https://phishdestroy.io/domain/xaman-app.online/) | 2026-06-09 | Online | GoDaddy.com | [xaman.to](https://phishdestroy.io/domain/xaman.to/) | 2026-06-09 | Online | Government of Kingdom of Tonga | [xaman-wallet.com](https://phishdestroy.io/domain/xaman-wallet.com/) | 2026-05-10 | Unknown | NICENIC | [xamanwallet-resync.com](https://phishdestroy.io/domain/xamanwallet-resync.com/) | 2026-03-28 | Online | Cloudflare | [xamans-aiiocation.xyz](https://phishdestroy.io/domain/xamans-aiiocation.xyz/) | 2026-03-18 | Unknown | NICENIC | [xaman-pass.com](https://phishdestroy.io/domain/xaman-pass.com/) | 2026-03-13 | Unknown | NiceNIC | [xaman.build](https://phishdestroy.io/domain/xaman.build/) | 2026-03-06 | Unknown | NiceNIC | [voter-xaman.app](https://phishdestroy.io/domain/voter-xaman.app/) | 2026-03-03 | Unknown | NiceNIC | [xrpl-xaman.app](https://phishdestroy.io/domain/xrpl-xaman.app/) | 2026-02-25 | Unknown | NICENIC | [xamanpc.app](https://phishdestroy.io/domain/xamanpc.app/) | 2026-02-23 | Offline | Vercel | [xaman-allocation.xyz](https://phishdestroy.io/domain/xaman-allocation.xyz/) | 2026-02-22 | Taken down | NiceNIC | [xaman.group](https://phishdestroy.io/domain/xaman.group/) | 2026-02-22 | Online | NiceNIC | [xamandesktopinstaller.app](https://phishdestroy.io/domain/xamandesktopinstaller.app/) | 2026-02-21 | Offline | NiceNIC | [xaman.guru](https://phishdestroy.io/domain/xaman.guru/) | 2026-02-20 | Online | NiceNIC | [checker-xaman.app](https://phishdestroy.io/domain/checker-xaman.app/) | 2026-02-19 | Unknown | NiceNIC | [xaman.finance](https://phishdestroy.io/domain/xaman.finance/) | 2026-02-19 | Unknown | NiceNIC | [xaman.chat](https://phishdestroy.io/domain/xaman.chat/) | 2026-02-18 | Online | NiceNIC | [xaman.financial](https://phishdestroy.io/domain/xaman.financial/) | 2026-02-17 | Online | NiceNIC | [xaman.markets](https://phishdestroy.io/domain/xaman.markets/) | 2026-02-16 | Unknown | NiceNIC | [xaman.capital](https://phishdestroy.io/domain/xaman.capital/) | 2026-02-16 | Unknown | NiceNIC | [xamanwallet.pro](https://phishdestroy.io/domain/xamanwallet.pro/) | 2026-02-13 | Offline | HOSTINGER operations | [xamanwallet.center](https://phishdestroy.io/domain/xamanwallet.center/) | 2026-02-13 | Online | NiceNIC | [xamansetup.app](https://phishdestroy.io/domain/xamansetup.app/) | 2026-02-13 | Online | NiceNIC | [de-xaman.xyz](https://phishdestroy.io/domain/de-xaman.xyz/) | 2026-02-13 | Unknown | NiceNIC | [xaman-wallet.world](https://phishdestroy.io/domain/xaman-wallet.world/) | 2026-02-13 | Online | NiceNIC | [fr-xaman.vip](https://phishdestroy.io/domain/fr-xaman.vip/) | 2026-02-13 | Online | NiceNIC | [pl-xaman.vip](https://phishdestroy.io/domain/pl-xaman.vip/) | 2026-02-13 | Online | NiceNIC | [xaman-app.net](https://phishdestroy.io/domain/xaman-app.net/) | 2026-02-13 | Unknown | NiceNIC | [xaman-xrp.live](https://phishdestroy.io/domain/xaman-xrp.live/) | 2026-02-13 | Online | NiceNIC | [fr-xaman.live](https://phishdestroy.io/domain/fr-xaman.live/) | 2026-02-13 | Online | NiceNIC | [de-xaman.live](https://phishdestroy.io/domain/de-xaman.live/) | 2026-02-13 | Online | NiceNIC | [xamanreward.app](https://phishdestroy.io/domain/xamanreward.app/) | 2026-02-12 | Online | NiceNIC | [xamandesktops.app](https://phishdestroy.io/domain/xamandesktops.app/) | 2026-02-12 | Offline | NiceNIC | [xamandesktop.io](https://phishdestroy.io/domain/xamandesktop.io/) | 2026-02-04 | Unknown | NiceNIC | [xaman-xummwallet.app](https://phishdestroy.io/domain/xaman-xummwallet.app/) | 2026-02-04 | Taken down | Tucows Domains | [All 54 Xaman reports](https://phishdestroy.io/domain/?brand=Xaman) ## Where they are registered and hosted ### Registrars - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)26 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)9 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)3 - [Google Firebase](https://phishdestroy.io/registrar/google/)2 - Vercel2 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)2 - [Google](https://phishdestroy.io/registrar/google/)1 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)1 ### Top-level domains - [.app](https://phishdestroy.io/tld/app/)18 - [.com](https://phishdestroy.io/tld/com/)8 - [.live](https://phishdestroy.io/tld/live/)3 - [.xyz](https://phishdestroy.io/tld/xyz/)3 - [.vip](https://phishdestroy.io/tld/vip/)2 - [.pro](https://phishdestroy.io/tld/pro/)2 - [.info](https://phishdestroy.io/tld/info/)2 - [.io](https://phishdestroy.io/tld/io/)1 ### Hosting networks - Cloudflare, Inc.39 - Amazon.com, Inc.4 - FASTLY, US3 - AMAZON-02 - Amazon.com, Inc., US2 - Hostinger International Limited2 - AMAZON-02, US1 - FASTLY - Fastly, Inc., US1 - CLOUDFLARENET - Cloudflare, Inc., US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Xaman; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/xaman/