Xaman

Crypto & web3xaman.appRank 267 of the most impersonated
Cert findings · 24 h
15
Cert findings · 7 days
54
50 reported or listed · 4 on phishing hosts
Registered lookalikes
143
25 listed by a source or an address list
Official domains
4
verified from Xaman's own sites and records

Certificate findings for Xaman

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Xaman's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 81 findings, grouped by hostname

  1. xaman-wallet.eu.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-wallet.eu.com
    Hostname
    xaman-wallet.eu.com
    First seen
    2026-11-04 21:56 UTC
    First published
    2026-11-04 22:19 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:27 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 20:57 UTC to 2027-02-02 20:57 UTC
    Logged 2026-11-04 21:55 UTC in IPng Networks Halloumi2027h1, entry 366,146,581
    SHA-256 324e96cbb5e5732a8b22675914cd9accb5086aa6e480affe50995de13c5764fc
    Public key SHA-256 c9de0d8b5112227a70e709121a525a3cc4357aee6c65772cafa126b70aa5a748
    Brand
    Xaman
    Addresses
    104.21.90.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a237
    2606:4700:3033::6815:5ae7
    Cloudflare
    Cloudflare (104.21.90.231, 172.67.162.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  2. allocation-xaman.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for allocation-xaman.xyz
    Hostname
    allocation-xaman.xyz
    First seen
    2026-11-04 20:16 UTC
    First published
    2026-11-04 21:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 21:16 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 19:16 UTC to 2027-02-02 19:16 UTC
    Logged 2026-11-04 20:14 UTC in Google ParcelYard2027h1, entry 613,985,645
    SHA-256 50d28eb9601711cba3b64c8f8ea7e9058dda790ea85e351557ac641d0cdbd10f
    Public key SHA-256 b3d35c58c3776b542203c2ae2e0cc50661218c24188d840b53ce9b4e41fca637
    Brand
    Xaman
    Addresses
    104.21.60.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3c99
    2606:4700:3036::ac43:c5fd
    Cloudflare
    Cloudflare (104.21.60.153, 172.67.197.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocation-xaman.xyz
    Registered
    2026-05-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:13 UTC

    Suggest a correction

  3. xamanwallet-token.pro US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xamanwallet-token.pro
    Hostname
    xamanwallet-token.pro
    First seen
    2026-11-04 18:30 UTC
    First published
    2026-11-04 18:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:54 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 17:30 UTC to 2027-02-02 17:30 UTC
    Logged 2026-11-04 18:29 UTC in DigiCert Wyvern2027h1, entry 405,794,945
    SHA-256 4d47c3ccf567cd06e62e935cf719ae3b26be853fd0b91c1d2b2751e55f15bf7f
    Public key SHA-256 6ba26e1e1605294b1b1c246a081c561e2f7f49984608604be58c3d8fbd20c846
    Brand
    Xaman
    Addresses
    104.21.81.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:bd52
    2606:4700:3037::6815:5177
    Cloudflare
    Cloudflare (104.21.81.119, 172.67.189.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamanwallet-token.pro
    Registered
    2026-05-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:52 UTC

    Suggest a correction

  4. cafe-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for cafe-xaman.app
    Hostname
    cafe-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 04:40 UTC to 2027-02-02 05:37 UTC
    Logged 2026-11-04 05:40 UTC in Let's Encrypt Willow2027h1, entry 926,841,127
    SHA-256 384d0e35e021f42864ce6b290434972f65ce33b67619ffc848816d49c5e63762
    Public key SHA-256 8eb9c7880b0d120bf96a7a4325c06b2fc2c15fcddbcf41200e416dae70cc78f5
    Brand
    Xaman
    Addresses
    104.21.6.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:64f
    2606:4700:3037::ac43:869e
    Cloudflare
    Cloudflare (104.21.6.79, 172.67.134.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cafe-xaman.app
    Registered
    2026-11-04 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:30 UTC

    Suggest a correction

  5. details-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide details for details-xaman.app
    Hostname
    details-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 22:13 UTC to 2027-02-01 22:13 UTC
    Logged 2026-11-03 23:12 UTC in Let's Encrypt Sycamore2027h1, entry 930,514,221
    SHA-256 3ba150eb2d192a2850f204fb5ec42a0b0378b2ccabb6eb1390b6038e641a22e9
    Public key SHA-256 21b80540c64f119d3038e0e5f35ec3d0194173e7c9e185119470eb8f960183a8
    Brand
    Xaman
    Addresses
    104.21.51.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b429
    2606:4700:3035::6815:3375
    Cloudflare
    Cloudflare (104.21.51.117, 172.67.180.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    details-xaman.app
    Registered
    2026-11-03 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:30 UTC

    Suggest a correction

  6. explore-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for explore-xaman.pages.dev
    Hostname
    explore-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 02:31 UTC to 2027-02-02 02:31 UTC
    Logged 2026-11-04 03:29 UTC in Google PlumbersArms2027h1, entry 601,954,932
    SHA-256 27a173215ede80e89c89d19864ca09a0afdc18035d7e6a5bf91d727d6b9aed9a
    Public key SHA-256 12ac4349fbbc346d72a7237edd02c0d743b8c733a83697f463f0761cce74558d
    Brand
    Xaman
    Addresses
    172.66.44.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c5c
    2606:4700:310c::ac42:2fa4
    Cloudflare
    Cloudflare (172.66.44.92, 172.66.47.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  7. explorer-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for explorer-xaman.app
    Hostname
    explorer-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-04 02:34 UTC to 2027-02-02 02:41 UTC
    Logged 2026-11-04 02:44 UTC in DigiCert Wyvern2027h1, entry 396,723,331
    SHA-256 57372e83f81529841da32befe4e38697f85924b9b66402f9cadc98eecabc92fa
    Public key SHA-256 d83f20fa74f553eae260b39ee62bca46eefe523c45c592376a631e7f827f81ad
    Brand
    Xaman
    Addresses
    104.21.90.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:5ab7
    2606:4700:3034::ac43:cbd1
    Cloudflare
    Cloudflare (104.21.90.183, 172.67.203.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    explorer-xaman.app
    Registered
    2026-11-04 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:30 UTC

    Suggest a correction

  8. open-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for open-xaman.pages.dev
    Hostname
    open-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 03:41 UTC to 2027-02-02 03:41 UTC
    Logged 2026-11-04 04:39 UTC in IPng Networks Halloumi2027h1, entry 357,047,170
    SHA-256 0d077f3c2f8b7b06ff355ae2ab9f1379efc0461ce50b1243b5aa9c3d7292c104
    Public key SHA-256 85dbff8fa8c78b4b3a9b1f9b3a1462726706605bf017fa64be7dec75e0641d23
    Brand
    Xaman
    Addresses
    172.66.44.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cfc
    2606:4700:310c::ac42:2f04
    Cloudflare
    Cloudflare (172.66.44.252, 172.66.47.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. overview-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for overview-xaman.app
    Hostname
    overview-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 23:41 UTC to 2027-02-01 23:41 UTC
    Logged 2026-11-04 00:39 UTC in Google PlumbersArms2027h1, entry 599,933,118
    SHA-256 4b4eb90ffbd0bca4287b97ab39dbebb663fa09806642a46917adda3fabd36ece
    Public key SHA-256 5125893e81160bc2690ef6037e3d64d46c833b6ae8bddfacad484b12efe9de27
    Brand
    Xaman
    Addresses
    104.21.1.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1e5
    2606:4700:3035::ac43:986a
    Cloudflare
    Cloudflare (104.21.1.229, 172.67.152.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    overview-xaman.app
    Registered
    2026-11-04 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:30 UTC

    Suggest a correction

  10. qualifys-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for qualifys-xaman.pages.dev
    Hostname
    qualifys-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 04:02 UTC to 2027-02-02 04:02 UTC
    Logged 2026-11-04 05:01 UTC in IPng Networks Halloumi2027h1, entry 357,221,218
    SHA-256 605eeef8829b8b7138fdaa3ec02bc35439af99c8076705f0397cf04a7c290d17
    Public key SHA-256 83f1cec2f315012ef5a9652e7f1d65458153a834a5c670e3019c020d086cb266
    Brand
    Xaman
    Addresses
    172.66.44.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cac
    2606:4700:310c::ac42:2f54
    Cloudflare
    Cloudflare (172.66.44.172, 172.66.47.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  11. rntbs-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for rntbs-xaman.pages.dev
    Hostname
    rntbs-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 02:33 UTC to 2027-02-02 02:33 UTC
    Logged 2026-11-04 03:32 UTC in Google PlumbersArms2027h1, entry 601,980,523
    SHA-256 71cd402be077117fc53aefef6028fadc5bcb237c529057d86fc34f5de44b1d8e
    Public key SHA-256 1e5f11e7db66ae2867a33d3016f2e9a5c8da1782c5c73a2ea4ac469f8a65c48c
    Brand
    Xaman
    Addresses
    172.66.44.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ccf
    2606:4700:310c::ac42:2f31
    Cloudflare
    Cloudflare (172.66.44.207, 172.66.47.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  12. rxtbs-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for rxtbs-xaman.app
    Hostname
    rxtbs-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:02 UTC in DigiCert Wyvern2027h1, entry 397,528,756
    SHA-256 02c56e610a7a2794d92845430984bb53315b8bf760bea1fe2bdd78091e5ffcc6
    Public key SHA-256 25b57a43e35b87431e9386ae417b4c7bddafbfebf5c620533ff356a5f83855f7
    Brand
    Xaman
    Addresses
    104.21.35.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2394
    2606:4700:3037::ac43:b0b8
    Cloudflare
    Cloudflare (104.21.35.148, 172.67.176.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rxtbs-xaman.app
    Registered
    2026-11-04 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:30 UTC

    Suggest a correction

  13. save-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for save-xaman.pages.dev
    Hostname
    save-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 04:38 UTC to 2027-02-02 04:38 UTC
    Logged 2026-11-04 05:37 UTC in Geomys Tuscolo2027h1, entry 468,979,101
    SHA-256 237457757774243c6e3226f50aee09aed30017e3046611e1e414b2d143e54066
    Public key SHA-256 218ce1da8194d49a88eb9456d72f9494f6d01319892b10295bdae135bd3671af
    Brand
    Xaman
    Addresses
    172.66.44.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c64
    2606:4700:310c::ac42:2f9c
    Cloudflare
    Cloudflare (172.66.44.100, 172.66.47.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  14. state-xaman.app DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for state-xaman.app
    Hostname
    state-xaman.app
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 00:42 UTC to 2027-02-02 00:42 UTC
    Logged 2026-11-04 01:40 UTC in DigiCert Sphinx2027h1, entry 349,239,567
    SHA-256 003337a8378a51b940b4fdc1cd3c97a88d0a752c2e0538a08614b8ea3b714d53
    Public key SHA-256 5a6bc983b866939b347d02bf00b9f038305bc4f69bfadc1dfaf76f6e62827169
    Brand
    Xaman
    Addresses
    185.53.179.149 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.149): a parking service. It answers for names that are typically for sale or unused.
    Domain
    state-xaman.app
    Registered
    2026-11-04 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:11 UTC

    Suggest a correction

  15. window-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for window-xaman.pages.dev
    Hostname
    window-xaman.pages.dev
    First seen
    2026-11-04 11:51 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-04 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 04:21 UTC to 2027-02-02 05:18 UTC
    Logged 2026-11-04 05:21 UTC in Google PlumbersArms2027h1, entry 603,208,800
    SHA-256 722f1fc517b1c7ffba1a703d4c740b8faa9eace214858e3c4470709727d6b51d
    Public key SHA-256 a882ac9010abf6b13705a1a56964fece453bb0f19d895e142205bf17462d2b4a
    Brand
    Xaman
    Addresses
    172.66.44.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cd8
    2606:4700:310c::ac42:2f28
    Cloudflare
    Cloudflare (172.66.44.216, 172.66.47.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  16. us-xaman.at US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide details for us-xaman.at
    Hostname
    us-xaman.at
    First seen
    2026-11-04 03:31 UTC
    First published
    2026-11-04 04:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-04 03:18 UTC to 2027-02-01 21:19 UTC
    Logged 2026-11-04 03:28 UTC in DigiCert Wyvern2027h1, entry 397,162,801
    SHA-256 39bf745855c9e5b9a73bce0e76919d2477088d888b73b04aee302c1aeafc0367
    Public key SHA-256 8d58c218b394bcabcaa1b671f3c03d7d8832b8441eac964063b8b276b38b883b
    Brand
    Xaman
    Addresses
    104.21.96.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:9620
    2606:4700:3032::6815:600a
    Cloudflare
    Cloudflare (104.21.96.10, 172.67.150.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    us-xaman.at
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:38 UTC

    Suggest a correction

  17. xamanwallet.money US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xamanwallet.money
    Hostname
    xamanwallet.money
    First seen
    2026-11-03 23:41 UTC
    First published
    2026-11-04 00:32 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:46 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 22:40 UTC to 2027-02-01 22:40 UTC
    Logged 2026-11-03 23:38 UTC in IPng Networks Halloumi2027h1, entry 354,468,808
    SHA-256 db4c33cdf399f27b5ccec094147ec0ba3ec0f2a6f279e621eea4f7a9c095cf7f
    Public key SHA-256 0ba8f1680c71f746e717137bc2feabb85e57787686bd7fcab261ded6a999e831
    Brand
    Xaman
    Addresses
    104.21.49.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:bd72
    2606:4700:3036::6815:315c
    Cloudflare
    Cloudflare (104.21.49.92, 172.67.189.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamanwallet.money
    Registered
    2026-05-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  18. en-xaman.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide details for en-xaman.wasmer.app
    Hostname
    en-xaman.wasmer.app
    First seen
    2026-11-03 07:52 UTC
    First published
    2026-11-03 08:50 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-03 06:50 UTC to 2027-02-01 06:50 UTC
    Logged 2026-11-03 07:49 UTC in Google PlumbersArms2027h1, entry 586,642,091
    SHA-256 9507e2a375c30b0e988bb28eefa37ee64eb1032b00a7681b59df9e15cea1c548
    Public key SHA-256 e3c3fa74a9bc3d6aa640da27b468f5dbd250b75eae0130ac86114fa6936f9d5f
    Brand
    Xaman
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

  19. voted-xaman.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for voted-xaman.org
    Hostname
    voted-xaman.org
    First seen
    2026-11-02 20:51 UTC
    First published
    2026-11-02 21:07 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 21:19 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 19:49 UTC to 2027-01-31 20:48 UTC
    Logged 2026-11-02 20:49 UTC in Google ParcelYard2027h1, entry 578,207,321
    SHA-256 cf58a00886f87b0b31d981018fbcce43385ad6ba354940153f97898b0a62b0e0
    Public key SHA-256 d47c281d7c399cb79653e756007c90f6d070fa30f74422bffa687c0db525683d
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.42.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:c9f9
    2606:4700:3037::6815:2a3e
    Cloudflare
    Cloudflare (104.21.42.62, 172.67.201.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voted-xaman.org
    Registered
    2026-07-07 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  20. xaman-wallet-vote.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for xaman-wallet-vote.xyz
    Hostname
    xaman-wallet-vote.xyz
    First seen
    2026-11-02 19:31 UTC
    First published
    2026-11-02 20:24 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 20:29 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-02 00:00 UTC to 2027-01-29 18:29 UTC
    Logged 2026-11-02 19:29 UTC in Microsec Eszigno2027h1, entry 53,889,406
    SHA-256 aec6ad26c8afb40aaa37340581ad3d8905ac5163531401191f5a713b673f23b5
    Public key SHA-256 261c10786a496bd082e9422164664233d8a3b0b78d39b7eeac231cd25cb5b968
    Brand
    Xaman
    Addresses
    104.21.62.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:3e24
    2606:4700:3036::ac43:db6c
    Cloudflare
    Cloudflare (104.21.62.36, 172.67.219.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-wallet-vote.xyz
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:19 UTC

    Suggest a correction

  21. votes-xaman.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for votes-xaman.org
    Hostname
    votes-xaman.org
    First seen
    2026-11-02 18:36 UTC
    First published
    2026-11-02 19:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:08 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 17:34 UTC to 2027-01-31 18:33 UTC
    Logged 2026-11-02 18:34 UTC in IPng Networks Gouda2027h1, entry 295,573,642
    SHA-256 811cc93e018b701b3b3fa9a5771c819d308ec0665d65ffd9104577dd174dcfe2
    Public key SHA-256 9acd3b5bbd06dbbfd1f8c962f732b328f48478036046d3c7d7ac0877fa41c993
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.27.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:a9c7
    2606:4700:3032::6815:1bdf
    Cloudflare
    Cloudflare (104.21.27.223, 172.67.169.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    votes-xaman.org
    Registered
    2026-07-07 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  22. dashboard-xaman.app
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 19 d ago
    DetailsHide details for dashboard-xaman.app
    Hostname
    dashboard-xaman.app
    First seen
    2026-11-02 13:52 UTC
    First published
    2026-11-02 14:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 14:41 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-02 00:00 UTC to 2027-01-22 19:04 UTC
    Logged 2026-11-02 13:46 UTC in Geomys Trastevere2027h1, entry 23,692,039
    SHA-256 2228cc0f359e8e3180e5b5dfa718992ae330c47003eac81ddedf0f8be7a0f82c
    Public key SHA-256 4a6ece544d1dace9e6aca81a809e0a72624fde9f53bd93fff20806b8df3b213f
    Brand
    Xaman
    Domain
    dashboard-xaman.app
    Registered
    2026-10-17 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  23. anniversary-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 20 d ago
    DetailsHide details for anniversary-xaman.app
    Hostname
    anniversary-xaman.app
    First seen
    2026-11-02 08:10 UTC
    First published
    2026-11-02 08:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-02 00:00 UTC to 2027-01-20 08:23 UTC
    Logged 2026-11-02 08:06 UTC in Geomys Tuscolo2027h1, entry 442,548,174
    SHA-256 6e74c456200d073660e32162a657d3664ea7f2695b9fc4ab163dfcfdc50a814d
    Public key SHA-256 5eae814690b7efdcba5928f9f06a9f8014cff271cde592b0befce0a905cc2395
    Brand
    Xaman
    Addresses
    104.21.70.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8a08
    2606:4700:3035::6815:46ad
    Cloudflare
    Cloudflare (104.21.70.173, 172.67.138.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    anniversary-xaman.app
    Registered
    2026-10-16 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  24. apps-xamanwallet.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for apps-xamanwallet.icu
    Hostname
    apps-xamanwallet.icu
    First seen
    2026-11-01 18:36 UTC
    First published
    2026-11-01 19:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:20 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-28 14:57 UTC
    Logged 2026-11-01 18:32 UTC in IPng Networks Gouda2027h1, entry 287,574,335
    SHA-256 0a0dc9299fa4c3453530ca1c7959b378a63ec9f4b58aea8b7770b042d1d80558
    Public key SHA-256 8f59ad2793ec3f390a92858b23c6cd28293c1df97058d39f3c41fd20a29a51ef
    Brand
    Xaman
    Addresses
    104.21.87.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:ab84
    2606:4700:3037::6815:57f3
    Cloudflare
    Cloudflare (104.21.87.243, 172.67.171.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    apps-xamanwallet.icu
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:19 UTC

    Suggest a correction

  25. launch-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide details for launch-xaman.app
    Hostname
    launch-xaman.app
    First seen
    2026-11-01 17:47 UTC
    First published
    2026-11-01 18:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:08 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 09:29 UTC to 2027-01-30 09:29 UTC
    Logged 2026-11-01 10:27 UTC in Google ParcelYard2027h1, entry 553,942,661
    SHA-256 3e0b4ed5222d3260e4c600cfb5e1760654cecb24f3920c03e239f33391ed9952
    Public key SHA-256 b5e5a10bf8bd14550e18b73803fe14d6075701cdfc611da9fbc6230d38adae9e
    Brand
    Xaman
    Addresses
    104.21.72.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:9727
    2606:4700:3031::6815:488b
    Cloudflare
    Cloudflare (104.21.72.139, 172.67.151.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    launch-xaman.app
    Registered
    2026-11-01 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  26. launch-xaman.tech
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide details for launch-xaman.tech
    Hostname
    launch-xaman.tech
    First seen
    2026-11-01 17:47 UTC
    First published
    2026-11-01 18:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-01 · checked 2026-11-04 18:08 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 12:42 UTC to 2027-01-30 12:42 UTC
    Logged 2026-11-01 13:41 UTC in Google PlumbersArms2027h1, entry 556,573,511
    SHA-256 962b7d5bc4904d2997495cc4edfc1a20a99e870f991d811dd26e456a671db5b4
    Public key SHA-256 0300e4de2bf1b6d500089b90a17e0316dae0206a4584427e62dc0fee925f72da
    Brand
    Xaman
    Domain
    launch-xaman.tech
    Registered
    2026-11-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  27. rnt-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide details for rnt-xaman.app
    Hostname
    rnt-xaman.app
    First seen
    2026-11-01 17:47 UTC
    First published
    2026-11-01 18:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:08 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 13:13 UTC to 2027-01-30 13:13 UTC
    Logged 2026-11-01 14:12 UTC in Geomys Tuscolo2027h1, entry 433,289,708
    SHA-256 1b762434432e2567d154174b745087673f62d331ac773c5d9c4f0c448aef23ae
    Public key SHA-256 713c09b142fb7ed43c7528e647f33429ab3e268ca94346f0ddb223c717931ec3
    Brand
    Xaman
    Addresses
    104.21.3.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:82e3
    2606:4700:3036::6815:397
    Cloudflare
    Cloudflare (104.21.3.151, 172.67.130.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rnt-xaman.app
    Registered
    2026-11-01 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  28. voting-xaman.org US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for voting-xaman.org
    Hostname
    voting-xaman.org
    First seen
    2026-11-01 15:56 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 14:51 UTC to 2027-01-30 15:48 UTC
    Logged 2026-11-01 15:51 UTC in DigiCert Sphinx2027h1, entry 329,367,789
    SHA-256 c3dc82dc7b7eaea75aeaa4445d1e0144b9edfef288be4a841fe67f6a61550636
    Public key SHA-256 fddae6fe266aad4aa4ecb0ddc2dd0d3cc58ac7c9a6a231b5604661d8e4fbd40c
    Brand
    Xaman
    Addresses
    104.21.40.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2877
    2606:4700:3034::ac43:9711
    Cloudflare
    Cloudflare (104.21.40.119, 172.67.151.17): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voting-xaman.org
    Registered
    2026-07-06 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  29. vote-xaman.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for vote-xaman.org
    Hostname
    vote-xaman.org
    First seen
    2026-11-01 15:21 UTC
    First published
    2026-11-01 16:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:31 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 14:17 UTC to 2027-01-30 15:16 UTC
    Logged 2026-11-01 15:17 UTC in IPng Networks Halloumi2027h1, entry 330,577,355
    SHA-256 d5ec3e2c7f70982db15003d1a4be09dc337742c3573308453781db0b826bc644
    Public key SHA-256 c4eb3cdbf58cb77cfc357bef80e6f8cbda678322eaeab3b85657d7abfd8dbe0e
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.48.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:30f3
    2606:4700:3034::ac43:9d17
    Cloudflare
    Cloudflare (104.21.48.243, 172.67.157.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-xaman.org
    Registered
    2026-07-06 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  30. xaman-information.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-information.pages.dev
    Hostname
    xaman-information.pages.dev
    First seen
    2026-11-01 12:57 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-27 14:48 UTC
    Logged 2026-11-01 12:52 UTC in Let's Encrypt Sycamore2027h1, entry 887,388,954
    SHA-256 598dc3cc5d3087f2ae762f2a7e5186a84a4f0201fd37d1d582186f5e468b43af
    Public key SHA-256 a839f701efa9b7bd24c6112edbc5bf594abb260b2445a1f7d39aff0cd5b5a7be
    Brand
    Xaman
    Addresses
    172.66.44.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c9b
    2606:4700:310c::ac42:2f65
    Cloudflare
    Cloudflare (172.66.44.155, 172.66.47.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  31. xaman-wallet-app.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for xaman-wallet-app.xyz
    Hostname
    xaman-wallet-app.xyz
    First seen
    2026-11-01 11:51 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-25 22:27 UTC
    Logged 2026-11-01 11:48 UTC in IPng Networks Gouda2027h1, entry 285,413,995
    SHA-256 12f6c1abb42ff7458845f2dbea181e3d2d459d89ae57d81ff6e55f9da04cce89
    Public key SHA-256 551d7c00a471f7fed5363beba69cfbc23fe36c366a4f85976aa274985ec13261
    Brand
    Xaman
    Addresses
    104.21.86.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:5682
    2606:4700:3035::ac43:dc30
    Cloudflare
    Cloudflare (104.21.86.130, 172.67.220.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-wallet-app.xyz
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:19 UTC

    Suggest a correction

  32. xamannft.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for xamannft.app
    Hostname
    xamannft.app
    First seen
    2026-11-01 11:51 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 10:50 UTC to 2027-01-30 11:48 UTC
    Logged 2026-11-01 11:50 UTC in DigiCert Sphinx2027h1, entry 328,434,619
    SHA-256 2f727b5fcc4abd49438afd55a4d8bfa1e4863354b9aaefb6638462af9354a6f3
    Public key SHA-256 a2dd4a38f58928a79e02a04b5d8b00751e79ba92fe11ee0cc686a27bd8db9701
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.78.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8985
    2606:4700:3034::6815:4ed2
    Cloudflare
    Cloudflare (104.21.78.210, 172.67.137.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamannft.app
    Registered
    2026-01-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  33. desk-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide details for desk-xaman.app
    Hostname
    desk-xaman.app
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-01 02:31 UTC to 2027-01-30 02:31 UTC
    Logged 2026-11-01 03:29 UTC in DigiCert Wyvern2027h1, entry 371,136,861
    SHA-256 42c64af80c0d9940f81e021f0e2572ed3261c76606e4c21500fc111df1176e4a
    Public key SHA-256 b02c408c5ebb5d063b9ca910b6235e56db43612559e44a844e1a5f1c5e6f0e92
    Brand
    Xaman
    Addresses
    104.21.52.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:349e
    2606:4700:3033::ac43:c925
    Cloudflare
    Cloudflare (104.21.52.158, 172.67.201.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    desk-xaman.app
    Registered
    2026-10-30 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  34. qualifying-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide details for qualifying-xaman.app
    Hostname
    qualifying-xaman.app
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 06:54 UTC to 2027-01-30 07:01 UTC
    Logged 2026-11-01 07:04 UTC in DigiCert Wyvern2027h1, entry 371,995,702
    SHA-256 36b47e94b4130796f9b7183fec6331ef16ffa4f229807e906c4a1f80547bc45e
    Public key SHA-256 3c9875e29210a43b66a53b740b8a13cb2b22a25b7c402d219c50c0c1a38401c5
    Brand
    Xaman
    Addresses
    104.21.54.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a903
    2606:4700:3035::6815:36c9
    Cloudflare
    Cloudflare (104.21.54.201, 172.67.169.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qualifying-xaman.app
    Registered
    2026-11-01 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:57 UTC

    Suggest a correction

  35. page-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide details for page-xaman.app
    Hostname
    page-xaman.app
    First seen
    2026-11-01 07:16 UTC
    First published
    2026-11-01 08:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:08 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 06:16 UTC to 2027-01-30 06:16 UTC
    Logged 2026-11-01 07:15 UTC in Let's Encrypt Sycamore2027h1, entry 883,875,926
    SHA-256 9db8693f082db3d8ca214cc567b456ccc258ddd6fb82fe3f2f94798543e98437
    Public key SHA-256 d5b7928aa5c263827232fe7f0a48389ded208b6bbd08772cbd96ba719bf7eb48
    Brand
    Xaman
    Addresses
    104.21.77.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:4d2f
    2606:4700:3037::ac43:cc7b
    Cloudflare
    Cloudflare (104.21.77.47, 172.67.204.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    page-xaman.app
    Registered
    2026-10-27 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  36. xrpfi-xaman.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xrpfi-xaman.com
    Hostname
    xrpfi-xaman.com
    First seen
    2026-11-01 00:44 UTC
    First published
    2026-11-01 01:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 00:31 UTC to 2027-01-27 17:36 UTC
    Logged 2026-11-01 00:42 UTC in DigiCert Sphinx2027h1, entry 325,747,210
    SHA-256 426af66655562feaecbd43e1fc7e52e1cb16ea4b72092ca0ac8a93ea618dfc8d
    Public key SHA-256 a19f08174ec4b104bd7d3ee662d7fc2b3d94981ad6010ea909914abc19d960a0
    Brand
    Xaman
    Addresses
    104.21.38.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2603
    2606:4700:3031::ac43:d8b6
    Cloudflare
    Cloudflare (104.21.38.3, 172.67.216.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xrpfi-xaman.com
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  37. xamanwallet.center CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    ReportedPhishing hostHostingerReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide details for xamanwallet.center
    Hostname
    xamanwallet.center
    First seen
    2026-11-01 00:35 UTC
    First published
    2026-11-01 01:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 88.223.85.90.
    1. Phishing-host list fetched with the address
    2. Resolved to 88.223.85.90
    3. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 23:34 UTC to 2027-01-29 23:34 UTC
    Logged 2026-11-01 00:33 UTC in Google PlumbersArms2027h1, entry 548,076,480
    SHA-256 8e6f29c09b5222d6334964673ff72b04472af9bf1d617c83079dd7455158586f
    Public key SHA-256 da391cb4a55f5da7cdcc0d9b4be60b18b72fbce501e52f5941d8c0b99df54d60
    PhishDestroy
    Brand
    Xaman
    Addresses
    88.223.85.90 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (88.223.85.90): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    xamanwallet.center
    Registered
    2025-11-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  38. xamanweb.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for xamanweb.app
    Hostname
    xamanweb.app
    First seen
    2026-10-31 21:41 UTC
    First published
    2026-10-31 22:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-31 20:41 UTC to 2027-01-29 20:41 UTC
    Logged 2026-10-31 21:39 UTC in Geomys Tuscolo2027h1, entry 424,776,051
    SHA-256 ac5a1e13d4a611a6e6007d1bd576a4bde4fea09a022d747fc1e3e53ee9b86cf1
    Public key SHA-256 d197336885e6cf0d0756cac933f6b7d3e4a47e9e8f0711ef6e1e1d2cc6ce19d0
    Brand
    Xaman
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    xamanweb.app
    Registered
    2026-06-28 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  39. fr-xaman.live US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for fr-xaman.live
    Hostname
    fr-xaman.live
    First seen
    2026-10-31 18:41 UTC
    First published
    2026-10-31 19:03 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:10 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-27 11:44 UTC
    Logged 2026-10-31 18:40 UTC in IPng Networks Halloumi2027h1, entry 323,482,140
    SHA-256 5c84464c0e0bee8bf4c6fdaf19362eaf86509512cab59365a3fe598fcdb07722
    Public key SHA-256 1f8c047375946aae91a7f61192d662f31ec148d971ef18e87e829de6935533b2
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.89.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:bd47
    2606:4700:3035::6815:5981
    Cloudflare
    Cloudflare (104.21.89.129, 172.67.189.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fr-xaman.live
    Registered
    2026-01-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  40. xaman-wallet.fun US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide details for xaman-wallet.fun
    Hostname
    xaman-wallet.fun
    First seen
    2026-10-31 12:21 UTC
    First published
    2026-10-31 12:30 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-31 11:19 UTC to 2027-01-29 12:18 UTC
    Logged 2026-10-31 12:19 UTC in Google PlumbersArms2027h1, entry 539,345,716
    SHA-256 01f8cac89e72713cda6fd51d2b17f8faa0dbb1fef09f721a3b7332bac46d1207
    Public key SHA-256 90ddbb83edaa031f667ecc3e91b6625052936d48ee19fad122458cf50b3b2872
    Brand
    Xaman
    Addresses
    104.21.48.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3045
    2606:4700:3033::ac43:b4a4
    Cloudflare
    Cloudflare (104.21.48.69, 172.67.180.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-wallet.fun
    Registered
    2026-09-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:19 UTC

    Suggest a correction

  41. xaman.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide details for xaman.ru
    Hostname
    xaman.ru
    First seen
    2026-10-30 14:42 UTC
    First published
    2026-10-30 14:56 UTC
    DNS
    Resolves · checked 2026-11-04 15:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 13:40 UTC to 2027-01-28 13:40 UTC
    Logged 2026-10-30 14:39 UTC in DigiCert Sphinx2027h1, entry 317,738,331
    SHA-256 ea46c623480f263b2cda543c6ed519639d39201dddf841707c84ff1377f2c727
    Public key SHA-256 cc4971ef5a452f480411ff19851901826badc513bd4bccf9a7e11463c3347b93
    Brand
    Xaman
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    xaman.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  42. www.xaman.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide details for www.xaman.ru
    Hostname
    www.xaman.ru
    First seen
    2026-10-30 14:42 UTC
    First published
    2026-10-30 14:56 UTC
    DNS
    Resolves · checked 2026-11-04 15:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 13:40 UTC to 2027-01-28 13:40 UTC
    Logged 2026-10-30 14:39 UTC in DigiCert Sphinx2027h1, entry 317,738,331
    SHA-256 ea46c623480f263b2cda543c6ed519639d39201dddf841707c84ff1377f2c727
    Public key SHA-256 cc4971ef5a452f480411ff19851901826badc513bd4bccf9a7e11463c3347b93
    Brand
    Xaman
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    xaman.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  43. login-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide details for login-xaman.app
    Hostname
    login-xaman.app
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 20:47 UTC to 2027-01-27 20:47 UTC
    Logged 2026-10-29 21:46 UTC in Google PlumbersArms2027h1, entry 512,964,643
    SHA-256 943ad699664def894fec7a96168c2d8e05e12da5da3eb598576935bcb52b8168
    Public key SHA-256 863290c5c7bcfb4b12006a4b33bfd3fd8fc801fc2928f7f9417df0a9c072cf2d
    Brand
    Xaman
    Addresses
    104.21.26.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:1a1e
    2606:4700:3035::ac43:a837
    Cloudflare
    Cloudflare (104.21.26.30, 172.67.168.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    login-xaman.app
    Registered
    2026-10-29 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  44. receive-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide details for receive-xaman.app
    Hostname
    receive-xaman.app
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 22:50 UTC to 2027-01-27 22:50 UTC
    Logged 2026-10-29 23:49 UTC in Geomys Tuscolo2027h1, entry 400,611,690
    SHA-256 3fd68f91b37ffb55d3cb1a5e0f0247369d8383a44b10cebacefdf0b947c3a108
    Public key SHA-256 3154a0f59d69e4dc59469fb5d6c2c62c936fb78db040e1aed82a84488c886f80
    Brand
    Xaman
    Addresses
    104.21.68.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:c6aa
    2606:4700:3036::6815:44d4
    Cloudflare
    Cloudflare (104.21.68.212, 172.67.198.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    receive-xaman.app
    Registered
    2026-10-29 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  45. reward-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for reward-xaman.pages.dev
    Hostname
    reward-xaman.pages.dev
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 20:59 UTC to 2027-01-27 20:59 UTC
    Logged 2026-10-29 21:57 UTC in Google ParcelYard2027h1, entry 512,396,134
    SHA-256 beb4ae307f10cd08708feec125b6d35e3d8a78c0c7531bcd3f8079925f6d0e9f
    Public key SHA-256 7a91a53fb7c2fd98e7018d89660c64297cdbf036f1ee4c4dea8ef27df3c54437
    Brand
    Xaman
    Addresses
    172.66.44.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c3d
    2606:4700:310c::ac42:2fc3
    Cloudflare
    Cloudflare (172.66.44.61, 172.66.47.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  46. rntb-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide details for rntb-xaman.app
    Hostname
    rntb-xaman.app
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 04:26 UTC to 2027-01-27 04:26 UTC
    Logged 2026-10-29 05:24 UTC in DigiCert Wyvern2027h1, entry 343,438,062
    SHA-256 71013b2225564b4e8aadf712e00148f03fd03f67537fe67c104cd381e3826b24
    Public key SHA-256 adfb4f2581e1a078505c0fe4e2c67d63d97449d9fc8215d4096028159180b0f4
    Brand
    Xaman
    Addresses
    104.21.27.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1b22
    2606:4700:3036::ac43:a8dd
    Cloudflare
    Cloudflare (104.21.27.34, 172.67.168.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rntb-xaman.app
    Registered
    2026-10-27 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  47. service-xaman.app
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide details for service-xaman.app
    Hostname
    service-xaman.app
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-10-30 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 19:59 UTC to 2027-01-27 19:59 UTC
    Logged 2026-10-29 20:57 UTC in Google ParcelYard2027h1, entry 511,760,110
    SHA-256 2e28cf572598bd1769e8d6394907a9ae19b2beb28f1ffc47f98e4be8f09c0bd4
    Public key SHA-256 0a316a379f4e0f0e60973740306215d7c5c8e5a6d25d108180e6a34f1a5157c2
    Brand
    Xaman
    Domain
    service-xaman.app
    Registered
    2026-10-29 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  48. xaman-user-rewards.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide details for xaman-user-rewards.app
    Hostname
    xaman-user-rewards.app
    First seen
    2026-10-30 11:41 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 11:51 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-10-30 05:27 UTC to 2027-01-28 05:36 UTC
    Logged 2026-10-30 05:37 UTC in DigiCert Wyvern2027h1, entry 356,758,201
    SHA-256 746eb46495c775832e6a1db3336abd5bf39954cea920be8871f439d62b6e969f
    Public key SHA-256 14c334957ea486bb734473924971a6e31ba68a1e06a7d3c693c8c8cbb6d606a9
    Brand
    Xaman
    Addresses
    104.21.54.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a818
    2606:4700:3037::6815:3639
    Cloudflare
    Cloudflare (104.21.54.57, 172.67.168.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-user-rewards.app
    Registered
    2026-10-30 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  49. xaman-home.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide details for xaman-home.app
    Hostname
    xaman-home.app
    First seen
    2026-10-30 05:40 UTC
    First published
    2026-10-29 11:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 02:14 UTC to 2027-01-27 02:14 UTC
    Logged 2026-10-29 03:12 UTC in Geomys Tuscolo2027h1, entry 389,952,472
    SHA-256 5e762a7a019319b6fa66cfe73475ee51cad85cb6a04179ab00f4076520613490
    Public key SHA-256 3341b83d0b11b0cd70cd2d59b5a7418b034852fcb78dc8c1629cec56daa8f812
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.95.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:95a4
    2606:4700:3034::6815:5ff0
    Cloudflare
    Cloudflare (104.21.95.240, 172.67.149.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-home.app
    Registered
    2026-10-29 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  50. xaman-promo-app.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-promo-app.pages.dev
    Hostname
    xaman-promo-app.pages.dev
    First seen
    2026-10-29 23:44 UTC
    First published
    2026-10-30 00:48 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 11:26 UTC to 2027-01-27 11:26 UTC
    Logged 2026-10-29 12:25 UTC in Geomys Tuscolo2027h1, entry 394,789,888
    SHA-256 348188b752cb9d401d97aef2481b322fa9cd26cdf1ac7cd0e5c62d3f1231ce7d
    Public key SHA-256 8dcd479455807fa6955ed64a0aecd00bce4802125665229aba08d77af16407b8
    Brand
    Xaman
    Addresses
    172.66.44.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c4f
    2606:4700:310c::ac42:2fb1
    Cloudflare
    Cloudflare (172.66.44.79, 172.66.47.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  51. xaman-promo.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide details for xaman-promo.app
    Hostname
    xaman-promo.app
    First seen
    2026-10-29 23:44 UTC
    First published
    2026-10-30 00:48 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-05 00:53 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 13:05 UTC to 2027-01-27 13:05 UTC
    Logged 2026-10-29 14:03 UTC in IPng Networks Gouda2027h1, entry 260,154,117
    SHA-256 3972217fca380d33b52ba4d34d00556caea1aa554889e63ece90e0751db47e6d
    Public key SHA-256 fe1c7611b63287ad4dc328e90d0a0f52cb1fca65c841dceba70f56bbf6729269
    Brand
    Xaman
    Addresses
    104.21.71.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:9429
    2606:4700:3034::6815:47c2
    Cloudflare
    Cloudflare (104.21.71.194, 172.67.148.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-promo.app
    Registered
    2026-10-29 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  52. rewards-xaman.cc US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for rewards-xaman.cc
    Hostname
    rewards-xaman.cc
    First seen
    2026-10-29 20:26 UTC
    First published
    2026-10-29 20:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 20:44 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-10 11:35 UTC to 2027-01-08 12:33 UTC
    Logged 2026-10-29 20:21 UTC in DigiCert Wyvern2027h1, entry 351,767,597
    SHA-256 441efbe4346f78ddb47d9aea8a6faddbf8824f50836fce41b80de92b532c7975
    Public key SHA-256 ee190c3bdf2b09ebef480243c1d1cba59ecf51110b8badf74efd542550a252b5
    Brand
    Xaman
    Addresses
    104.21.80.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:ba3b
    2606:4700:3037::6815:5098
    Cloudflare
    Cloudflare (104.21.80.152, 172.67.186.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-xaman.cc
    Registered
    2026-06-14 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  53. xaman-4zl.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-4zl.pages.dev
    Hostname
    xaman-4zl.pages.dev
    First seen
    2026-10-29 17:40 UTC
    First published
    2026-10-29 18:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:34 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-29 08:37 UTC to 2027-01-27 08:37 UTC
    Logged 2026-10-29 09:36 UTC in Let's Encrypt Willow2027h1, entry 830,121,757
    SHA-256 c8ab771553c3129cd41e8feb6ffe23a0ee719b03435d17dc065ee5b79aea5536
    Public key SHA-256 8425fc1732042a7bd2aef0ed0883f6a5f6b3a08a7a64463534e1ead27b1ae2bf
    Brand
    Xaman
    Addresses
    172.66.44.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cc5
    2606:4700:310c::ac42:2f3b
    Cloudflare
    Cloudflare (172.66.44.197, 172.66.47.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  54. pl-xaman.vip US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for pl-xaman.vip
    Hostname
    pl-xaman.vip
    First seen
    2026-10-29 03:56 UTC
    First published
    2026-10-29 04:38 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:50 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-29 00:00 UTC to 2027-01-15 00:03 UTC
    Logged 2026-10-29 03:53 UTC in DigiCert Sphinx2027h1, entry 301,726,890
    SHA-256 0886594859f2482ada95d1943ef8ef75430645f8d8f085864b6eb1a16ea4c9ed
    Public key SHA-256 391719a41e180d1c4c3b5a27f02691516ea38cbe25fadafe2f6a42875ca0d50d
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.45.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:2dc3
    2606:4700:3033::ac43:da7e
    Cloudflare
    Cloudflare (104.21.45.195, 172.67.218.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pl-xaman.vip
    Registered
    2026-01-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  55. home-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide details for home-xaman.app
    Hostname
    home-xaman.app
    First seen
    2026-10-28 23:38 UTC
    First published
    2026-10-29 00:30 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:41 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 14:39 UTC to 2027-01-26 14:39 UTC
    Logged 2026-10-28 15:37 UTC in Google PlumbersArms2027h1, entry 491,393,531
    SHA-256 8e6fb54bbf62e57edf1cfec5570d6f45baebb2e24fa6954c3fcaa8a2d830fd91
    Public key SHA-256 440b3f4c40a600ee5e27be72d5fe41f3ff727219be28a01e459294edd595a4a7
    Brand
    Xaman
    Addresses
    104.21.16.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:d456
    2606:4700:3037::6815:1079
    Cloudflare
    Cloudflare (104.21.16.121, 172.67.212.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    home-xaman.app
    Registered
    2026-10-28 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  56. eligible-xaman.app DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide details for eligible-xaman.app
    Hostname
    eligible-xaman.app
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 02:45 UTC to 2027-01-26 02:45 UTC
    Logged 2026-10-28 03:44 UTC in IPng Networks Halloumi2027h1, entry 284,324,315
    SHA-256 08adff6abcf3605098faf29df61bbc35905753aaefd4807c13c91e54430b4c2a
    Public key SHA-256 f2aae0d42795b2e9d3332705c4c5345a6cf4c93e840342b541ce34bc90c8bba9
    Brand
    Xaman
    Addresses
    185.53.179.149 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.149): a parking service. It answers for names that are typically for sale or unused.
    Domain
    eligible-xaman.app
    Registered
    2026-10-28 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  57. qualify-xaman.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for qualify-xaman.pages.dev
    Hostname
    qualify-xaman.pages.dev
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 08:42 UTC to 2027-01-26 08:42 UTC
    Logged 2026-10-28 09:41 UTC in Geomys Tuscolo2027h1, entry 380,555,826
    SHA-256 2e2f592bfc73d4363b524649cf442b1b36b1d1650acec49da6614543b596e3db
    Public key SHA-256 e3408d9e0756f0d4576fb4b28db496a4d276297efed732e483a699ed4d5cb4c2
    Brand
    Xaman
    Addresses
    172.66.44.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c6d
    2606:4700:310c::ac42:2f93
    Cloudflare
    Cloudflare (172.66.44.109, 172.66.47.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  58. xaman-app-33e.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-app-33e.pages.dev
    Hostname
    xaman-app-33e.pages.dev
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 12:20 UTC to 2027-01-26 12:20 UTC
    Logged 2026-10-28 13:19 UTC in DigiCert Sphinx2027h1, entry 294,829,016
    SHA-256 216481132a31ba430fd37042070edb0e66af169e123fd5de07f7495ab4cb352e
    Public key SHA-256 05eb475cdd3e0b78fbde20b8b220a9c63d42451b6989474903c5020e7e8a248e
    Brand
    Xaman
    Addresses
    172.66.44.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c87
    2606:4700:310c::ac42:2f79
    Cloudflare
    Cloudflare (172.66.44.135, 172.66.47.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  59. xaman-qualify.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-qualify.pages.dev
    Hostname
    xaman-qualify.pages.dev
    First seen
    2026-10-28 17:37 UTC
    First published
    2026-10-28 18:18 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:30 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 11:20 UTC to 2027-01-26 11:20 UTC
    Logged 2026-10-28 12:18 UTC in Geomys Tuscolo2027h1, entry 381,851,280
    SHA-256 22ccbac26ff1bfc3eb245fcb75c393757a789d3777f0bfab3d232367fc0c6518
    Public key SHA-256 7be84cb6572567b93f6b5312637689cb4d1eec0d993c356e3f39e876ea7d69f4
    Brand
    Xaman
    Addresses
    172.66.44.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c53
    2606:4700:310c::ac42:2fad
    Cloudflare
    Cloudflare (172.66.44.83, 172.66.47.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  60. governance-xaman.icu US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide details for governance-xaman.icu
    Hostname
    governance-xaman.icu
    First seen
    2026-10-28 15:31 UTC
    First published
    2026-10-28 16:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-10-28 15:18 UTC to 2027-01-23 06:49 UTC
    Logged 2026-10-28 15:28 UTC in DigiCert Sphinx2027h1, entry 295,872,215
    SHA-256 af4a2e183bf5dc823a30bb0510f75e3f03239f570af73c1df0bf147e6cf88387
    Public key SHA-256 d0f81c756a15a3353ec1808fbee3e8058833765ed95fa4e4a422119ae11c31db
    Brand
    Xaman
    Addresses
    104.21.34.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:22f9
    2606:4700:3035::ac43:a6a5
    Cloudflare
    Cloudflare (104.21.34.249, 172.67.166.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    governance-xaman.icu
    Registered
    2026-08-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:19 UTC

    Suggest a correction

  61. xamantoken.my US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide details for xamantoken.my
    Hostname
    xamantoken.my
    First seen
    2026-10-28 12:41 UTC
    First published
    2026-10-28 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:20 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 11:41 UTC to 2027-01-26 11:41 UTC
    Logged 2026-10-28 12:40 UTC in Google ParcelYard2027h1, entry 488,364,865
    SHA-256 64f3b1709d1c3dd775532667044b0f397cb9b3d548c02bd9e85ed026a59f1ac5
    Public key SHA-256 77d26d411704cfd0e4be9c6179bbe238b9c39822c2a799cfd1f14e5dec48b3d8
    Brand
    Xaman
    Addresses
    104.21.34.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2254
    2606:4700:3035::ac43:c9fe
    Cloudflare
    Cloudflare (104.21.34.84, 172.67.201.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamantoken.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  62. allocations-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide details for allocations-xaman.app
    Hostname
    allocations-xaman.app
    First seen
    2026-10-28 11:36 UTC
    First published
    2026-10-28 11:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 03:39 UTC to 2027-01-26 03:39 UTC
    Logged 2026-10-28 04:37 UTC in Google ParcelYard2027h1, entry 482,714,487
    SHA-256 432b15ad2427746f423d67e6da5422c717d552dc2a6214d2191a9d4c482cfc5f
    Public key SHA-256 996b6779ae8e3603471cfa010b00e1c87c325502dc7972b1add60ed8d74ade2d
    Brand
    Xaman
    Addresses
    104.21.41.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:9423
    2606:4700:3036::6815:2998
    Cloudflare
    Cloudflare (104.21.41.152, 172.67.148.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocations-xaman.app
    Registered
    2026-10-28 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  63. claim-xaman.app US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide details for claim-xaman.app
    Hostname
    claim-xaman.app
    First seen
    2026-10-28 05:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Reported
    PhishDestroy
    1. Latest DNS check
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    PhishDestroy
    Brand
    Xaman
    Addresses
    104.21.36.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:c99f
    2606:4700:3034::6815:24fc
    Cloudflare
    Cloudflare (104.21.36.252, 172.67.201.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-xaman.app
    Registered
    2026-10-27 · Dynadot LLC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:46 UTC

    Suggest a correction

  64. xaman.group US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide details for xaman.group
    Hostname
    xaman.group
    First seen
    2026-10-27 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 17:49 UTC to 2027-01-25 17:49 UTC
    Logged 2026-10-27 18:48 UTC in Google ParcelYard2027h1, entry 475,940,430
    SHA-256 03d8ff305243c70a4fd59c5d2da3a3a7308afc9935d2a69f9633827e1aadb074
    Public key SHA-256 e7a99df05103486e86b79e94783bf777bb449fdae2cbd9458c7a8efd9be17969
    Brand
    Xaman
    Addresses
    104.21.63.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3f84
    2606:4700:3035::ac43:91c5
    Cloudflare
    Cloudflare (104.21.63.132, 172.67.145.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman.group
    Registered
    2026-02-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:33 UTC

    Suggest a correction

  65. xamantoken.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xamantoken.app
    Hostname
    xamantoken.app
    First seen
    2026-10-27 18:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-27 17:30 UTC to 2027-01-25 17:30 UTC
    Logged 2026-10-27 18:28 UTC in Let's Encrypt Sycamore2027h1, entry 806,692,795
    SHA-256 18700ec16660b6108c6f6243c965eb55046edab863f63b014a556dcd90256fd6
    Public key SHA-256 8f106a99770a0a8c5519e4fb829e34f2520497a00897b7aaa78eb332e78c21b2
    Brand
    Xaman
    Addresses
    104.21.18.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:122e
    2606:4700:3037::ac43:b462
    Cloudflare
    Cloudflare (104.21.18.46, 172.67.180.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamantoken.app
    Registered
    2026-05-03 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  66. en-xaman.at US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide details for en-xaman.at
    Hostname
    en-xaman.at
    First seen
    2026-10-27 17:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-27 16:07 UTC to 2027-01-25 17:06 UTC
    Logged 2026-10-27 17:08 UTC in Google ParcelYard2027h1, entry 474,675,663
    SHA-256 3018046300d9d370bc2470401f79baac0a8b85271ed929fbf17df9d84fbddd5d
    Public key SHA-256 86111fa67107315e1b49d160cb4241605ca66d2d2484c6e015ce08a612a75077
    Brand
    Xaman
    Addresses
    104.21.62.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3e1f
    2606:4700:3031::ac43:db67
    Cloudflare
    Cloudflare (104.21.62.31, 172.67.219.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    en-xaman.at
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  67. xamanwallet-xapp.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for xamanwallet-xapp.com
    Hostname
    xamanwallet-xapp.com
    First seen
    2026-10-27 13:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 471,919,377
    SHA-256 15b25cd81308cd307036049f16936ec34e12383aef0302948ca9e05ed153bed7
    Brand
    Xaman
    Addresses
    104.21.84.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:bca6
    2606:4700:3034::6815:544c
    Cloudflare
    Cloudflare (104.21.84.76, 172.67.188.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xamanwallet-xapp.com
    Registered
    2026-06-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  68. xaman-anniversary.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-anniversary.pages.dev
    Hostname
    xaman-anniversary.pages.dev
    First seen
    2026-10-27 11:35 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-03 00:00 UTC to 2027-01-25 23:11 UTC
    Logged 2026-11-03 12:53 UTC in DigiCert Wyvern2027h1, entry 388,683,901
    SHA-256 42c70ed1433520a5ff2ec0e1f29b9459ee3513c834fc563d389302273485eb14
    Public key SHA-256 f2398b48744040116345cfc55bbf781ebf5bebdb43a06ede0b589a926e8849ea
    Brand
    Xaman
    Addresses
    172.66.44.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c7b
    2606:4700:310c::ac42:2f85
    Cloudflare
    Cloudflare (172.66.44.123, 172.66.47.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. xaman-xrp.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-xrp.pages.dev
    Hostname
    xaman-xrp.pages.dev
    First seen
    2026-10-27 11:35 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    172.66.44.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c8c
    2606:4700:310c::ac42:2f74
    Cloudflare
    Cloudflare (172.66.44.140, 172.66.47.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  70. xaman-xrpl-rewards.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-xrpl-rewards.pages.dev
    Hostname
    xaman-xrpl-rewards.pages.dev
    First seen
    2026-10-27 11:35 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brands
    Xaman, Ripple (XRP)
    Addresses
    172.66.44.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c9d
    2606:4700:310c::ac42:2f63
    Cloudflare
    Cloudflare (172.66.44.157, 172.66.47.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  71. votes-xaman.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for votes-xaman.xyz
    Hostname
    votes-xaman.xyz
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    104.21.16.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:10cb
    2606:4700:3035::ac43:d7e8
    Cloudflare
    Cloudflare (104.21.16.203, 172.67.215.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    votes-xaman.xyz
    Registered
    2026-06-25 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  72. xaman-allocation.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-allocation.pages.dev
    Hostname
    xaman-allocation.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    172.66.44.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c8f
    2606:4700:310c::ac42:2f71
    Cloudflare
    Cloudflare (172.66.44.143, 172.66.47.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  73. xaman-allocations.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-allocations.pages.dev
    Hostname
    xaman-allocations.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    172.66.44.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cc5
    2606:4700:310c::ac42:2f3b
    Cloudflare
    Cloudflare (172.66.44.197, 172.66.47.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  74. xaman-portal.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-portal.pages.dev
    Hostname
    xaman-portal.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    172.66.44.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c9e
    2606:4700:310c::ac42:2f62
    Cloudflare
    Cloudflare (172.66.44.158, 172.66.47.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  75. xaman-reward.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-reward.pages.dev
    Hostname
    xaman-reward.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Certificate
    Logged in Sectigo Monument2027h1, entry 1,670,842
    SHA-256 18a89d2c59c944ec1043c8ed255428129db1a0aaa8c7a6c5ec3195d5a05718c4
    Brand
    Xaman
    Addresses
    172.66.44.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ccc
    2606:4700:310c::ac42:2f34
    Cloudflare
    Cloudflare (172.66.44.204, 172.66.47.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  76. xaman-rewards.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for xaman-rewards.pages.dev
    Hostname
    xaman-rewards.pages.dev
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    172.66.44.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c3b
    2606:4700:310c::ac42:2fc5
    Cloudflare
    Cloudflare (172.66.44.59, 172.66.47.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  77. xaman.claims US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xaman.claims
    Hostname
    xaman.claims
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    104.21.78.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:4eba
    2606:4700:3037::ac43:a857
    Cloudflare
    Cloudflare (104.21.78.186, 172.67.168.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman.claims
    Registered
    2026-05-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  78. xaman.gd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide details for xaman.gd
    Hostname
    xaman.gd
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    104.21.83.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:537f
    2606:4700:3034::ac43:afdd
    Cloudflare
    Cloudflare (104.21.83.127, 172.67.175.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman.gd
    Registered
    2026-03-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  79. xaman.gifts US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for xaman.gifts
    Hostname
    xaman.gifts
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Listed
    MetaMask
    1. Latest DNS check
    2. Observed in the MetaMask feed
    3. We matched the new listing
    Brand
    Xaman
    Addresses
    104.21.18.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b3ed
    2606:4700:3036::6815:1223
    Cloudflare
    Cloudflare (104.21.18.35, 172.67.179.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman.gifts
    Registered
    2026-05-02 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  80. xamanapp.io US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide details for xamanapp.io
    Hostname
    xamanapp.io
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Xaman
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    xamanapp.io
    Registered
    2026-08-25 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Xaman when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →