event-xaman-app[.]com

The domain event-xaman-app.com is assessed as a high-risk brand impersonation threat. It specifically targets users by impersonating an airdrop scam, aiming to deceive and potentially steal sensitive information or cryptocurrency from unsuspecting visitors.

Analysis indicates that the domain is flagged by 13 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 172.67.191.229. The domain was created on June 03, 2026, which is a relatively recent registration, often a red flag for malicious activities. Additionally, the domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The SSL certificate is issued by Google Trust Services, which might be used to lend credibility to the site. The site also implements HSTS, Cloudflare, and HTTP/3 technologies, which can mask malicious intent by providing a secure and fast user experience.

To mitigate the risks associated with this brand impersonation threat, users are advised to avoid clicking on links or entering personal information on event-xaman-app.com. Security teams should consider adding this domain to their blocklists and monitoring for any related malicious activities. Users are encouraged to verify the authenticity of airdrop offers through official channels and to report any suspicious activity to their security teams or local authorities.