vote-xamon[.]app

Domain vote-xamon.app is classified as a generic phishing threat and remains active. This domain impersonates the Xaman brand, specifically targeting users of the XRP Community Day event with a fraudulent vote and allocation claim scheme.

Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 104.21.13.117. VirusTotal data shows 3 of 95 security vendors flagging this domain as malicious. The domain was created on June 21, 2026, indicating a recently established threat. No blocklist count or trust scores were provided in the known intelligence, but the low detection ratio suggests the domain may evade some automated filters. The page title, "Xaman – XRP Community Day | Vote & Claim Your Allocation," directly mimics legitimate Xaman branding to deceive visitors.

Current status confirms the domain is still active, posing an ongoing risk to users. Concrete recommendations include blocking all network traffic to vote-xamon.app and the associated IP 104.21.13.117, implementing email and web gateway filters to prevent access, and educating users about Xaman-branded phishing campaigns. Organizations should add this domain to threat intelligence feeds and monitor for related subdomains or variations.