xamaninvest[.]group

The domain xamaninvest.group is identified as a generic phishing threat and is currently active. The page impersonates a cryptocurrency community event associated with XRP, leveraging the title "Xaman – XRP Community Day | Vote & Claim Your Allocation" to lure potential victims. This type of attack targets users interested in cryptocurrency, attempting to extract sensitive information under the pretense of a legitimate event.

According to the data, the domain xamaninvest.group resolves to the IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain was created on June 23, 2026, suggesting it is in its early stages and potentially newly registered for malicious activities. It is noteworthy that only 1 out of 95 VirusTotal security vendors has flagged this domain, indicating a low detection rate. Furthermore, xamaninvest.group has been referenced in 1 threat intelligence pulse in AlienVault OTX, highlighting its recognition within the threat landscape.

As this domain remains active, it poses a high risk to individuals, especially those involved in the cryptocurrency sector. It is essential for potential victims to exercise caution when interacting with such domains. Recommendations include conducting thorough verification of URLs before engaging with them, utilizing security solutions with phishing protection features, and ensuring that sensitive data is only shared through vetted, trustworthy channels. Regular monitoring of known malicious domains and employing proactive cybersecurity measures are critical to mitigating risks associated with this domain.