# xaman-world.app — SUSPICIOUS

> xaman-world.app is a crypto drainer scam flagged on VirusTotal with 0/95 detections. Avoid entering wallet credentials or connecting your wallet to this site.

## Summary
PhishDestroy identifies xaman-world.app as an active crypto drainer scam domain designed to trick users into connecting their cryptocurrency wallets and authorize malicious transactions. The domain mimics legitimate crypto wallet interfaces, specifically targeting users of Xaman (formerly known as Xumm), a popular XRP wallet application. Security researchers have noted that crypto drainers often employ deceptive UI/UX patterns to prompt wallet connections and transaction approvals that drain funds without user consent.  This domain was registered on December 27, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is hosted on IP address 104.21.14.115. The site uses a valid Let’s Encrypt SSL certificate to appear legitimate. Currently, the domain shows 0 detections out of 95 engines on VirusTotal, and it has not been flagged by Google Safe Browsing (GSB). No public blocklists have been reported to include this domain yet.  As of this assessment, xaman-world.app remains active and poses a high risk to cryptocurrency users, particularly those unfamiliar with Xaman or XRP wallet ecosystems. Users are strongly advised not to interact with this domain, avoid entering wallet credentials, or connect their wallets. The domain’s recent creation and low detection rate suggest it may be newly deployed and spreading rapidly. If users have already connected their wallets or entered sensitive data, they should immediately revoke unauthorized permissions, transfer remaining funds to a new wallet, and report the incident to relevant authorities. Remaining risk is HIGH due to the active nature and specific targeting of crypto users.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-27 18:40:19
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.14.115

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/xaman-world.app
- PhishDestroy: https://phishdestroy.io/domain/xaman-world.app/
- LLM endpoint: https://phishdestroy.io/domain/xaman-world.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xaman-world.app/
Last updated: 2026-04-07