xaman[.]club

The domain xaman.club was registered on July 25, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently resolving to the IPv4 address 188.114.97.3. DNS resolution is provided by the Cloudflare authoritative name servers jill.ns.cloudflare.com and skip.ns.cloudflare.com. The domain remains active as of the report date, August 07, 2026, and has been observed on one external security blocklist. Independent threat‑intelligence services, including PhishDestroy, have already flagged the domain as malicious and have taken blocking actions. A VirusTotal scan performed on the domain involved 91 antivirus and URL‑analysis engines; none of the engines returned a detection at the time of scanning.

The absence of detections does not constitute a safety guarantee, and the domain should continue to be treated as hostile given its classification as generic phishing. No public TLS certificate information, HTTP response codes, page titles, or content snapshots are currently available, limiting the ability to assess the exact payload or credential‑harvesting techniques employed. Likewise, the domain does not appear in additional reputation services such as Google Safe Browsing or OTX, and no ASN or country attribution is supplied beyond the IP address. Defenders should prioritize immediate containment measures. Network perimeter controls ought to block both the domain name and its resolved IP address (188.114.97.3).

Email gateways should be updated to reject messages containing URLs that resolve to this domain. Endpoint detection and response solutions can be configured to flag any outbound connections to the domain or its name servers. Continuous monitoring of the IP address for any new services, as well as periodic re‑scans on VirusTotal or similar platforms, is recommended to detect potential shifts in malicious behavior.