# xamans-aiiocation.xyz — SUSPICIOUS

> Explore the risks linked to xamans-aiiocation.xyz. Recently created and under scrutiny for possible phishing activities.

## Summary
PhishDestroy has identified the domain xamans-aiiocation.xyz as associated with generic phishing activity, currently classified under investigation status. The domain was registered recently on March 13, 2026, suggesting it is a new entry potentially set up for malicious purposes. Its classification as generic phishing indicates attempts to deceive users into revealing sensitive information, although definitive confirmation is pending further analysis.

The domain resolves to the IP address 188.114.96.3, which helps analysts focus on the hosting infrastructure potentially linked with phishing campaigns. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the registrar is noted but does not inherently confirm malicious activity. Despite the domain being under investigation, VirusTotal scans show zero detections across 95 security tools, meaning no known malware or phishing signatures have been flagged yet. This underscores the importance of monitoring and correlating additional threat intelligence signals before concluding its risk profile.

Currently, xamans-aiiocation.xyz remains active and is closely monitored by PhishDestroy for any emerging signs of phishing or related cyber threats. Users and network defenders are advised to exercise caution and keep track of any suspicious interactions involving this domain. As investigations continue, updates will be provided to ensure timely awareness and protection against potential exploitation attempts linked to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Target brand: Xaman
- Page title: Xaman – XRP Community Day | Vote & Claim Your Allocation

## Domain Intelligence
- Registered: 2026-03-13 22:19:21
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: CN
- IP: 188.114.96.3
- Nameservers: anahi.ns.cloudflare.com nikon.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d0196-2fc1-71aa-8c61-19aed5577629.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/0d1ff2ef-528c-4501-bc31-34433c11bc74
- PhishDestroy: https://phishdestroy.io/domain/xamans-aiiocation.xyz/
- LLM endpoint: https://phishdestroy.io/domain/xamans-aiiocation.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xamans-aiiocation.xyz/
Last updated: 2026-03-19