xamanvoting[.]live

This domain is flagged as a high-risk cryptocurrency phishing site designed to steal wallet credentials and private keys. Analysis indicates it mimics legitimate wallet interfaces to deceive users into entering sensitive information, which is then harvested by threat actors. The site specifically targets users of decentralized finance platforms, posing a direct financial risk through unauthorized asset transfers. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on July 02, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent domains. It resolves to the IP address 188.114.96.3 and is currently active. Security vendors on VirusTotal have flagged this domain, with 3 out of 95 engines detecting it as malicious. Additionally, it appears on two security blocklists, and its SSL certificate is issued by Google Trust Services, a common tactic to appear legitimate. If you have visited xamanvoting.live or entered any credentials, immediate action is required. First, disconnect the device from the internet to prevent further data transmission. Next, revoke any active wallet sessions and transfer assets to a new, secure wallet address. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the incident to relevant security teams and consider scanning the device for malware using updated security tools. Users should also verify the legitimacy of any communication or links claiming to be from wallet services before interacting with them.