---
title: "Is vote-xaman.org a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "vote-xaman.org"
verdict: "Critical Risk"
title: "Is vote-xaman.org a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/vote-xaman.org
assessed: 2026-10-27
---

# Is vote-xaman.org a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** vote-xaman.org shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 18 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 24 reports; shared hosting inflates reports) | Clear |
| Domain age | 4 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


No screenshot is retained for this report.

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page landing site, titled "Xaman – XRP Community Day | Vote & Claim Your Allocation", that invites visitors to take part in a community vote and claim an allocation tied to the XRP ecosystem. The captured homepage carries very little text beyond that headline. Its apparent purpose is to lead visitors into a claim-and-vote flow, a model typically used to draw cryptocurrency users into wallet-linked or credential-linked actions.


### Scam/Impersonation Risk

Contradictory signals are present and decisive. Multiple independent security engines currently flag the domain as malicious or suspicious, including several top-tier vendors, and the domain is blacklisted by external reputation sources (VirusTotal and an external blacklist). This is a confirmed, hard adverse reputation finding, not a soft third-party warning. The pairing of a recently created domain with a wallet-brand-style name, a "Community Day" framing, and a "claim your allocation" call to action matches a well-known lure pattern for tricking crypto users into giving up credentials or authorising transactions. Identity verification for this site is unresolved. The page was captured, but AI page analysis was unavailable, so the site has not been independently connected to any real-world brand or person (identity confidence is low, at 0.15). The available evidence does not tie the site to the real operator of the brand it evokes, so any apparent affiliation should be treated as unverified. In the behavioural sandbox, the page generated a substantial share of requests to external destinations, including POST submissions to non-whitelisted third-party endpoints, and produced repeated console errors. Data leaving the page toward unrecognised parties is consistent with the reputation findings and is an aggravating factor. Evidence:

- Domain registered 2026-07-06 through Key-Systems GmbH (~0.31 years old, about 112 days); the registration is very recent.
- Web archive holds 1 snapshot, captured 2026-08-07, covering 1 year tracked, so there is no meaningful operating history.
- Homepage sandbox runs recorded 2 non-whitelisted external POST requests and about 58% maximum external request share across 3 runs, with 5 console errors.
- Three major security vendors independently flag the domain as malicious, alongside a wider group of engines reporting malicious or suspicious verdicts.

### Regulatory Verification Notes

The homepage contains almost no descriptive text, and no operator name, legal entity, terms page, or licensing or registration statement was observable. Any activity involving "allocations", voting, or token claims would normally warrant clear disclosure of who runs it and under what authority. The site gives none, and its on-page disclosure state is unclear. This is a disclosure gap, not proof of wrongdoing by itself, but here it compounds the adverse reputation findings rather than standing alone. No third-party broker or regulator listing was matched to the site, and regulatory confidence is low. No external verdict on its standing exists beyond the security findings above. Evidence:

- Homepage text is minimal (56 characters), with no identifiable legal entity, contact detail, or regulatory reference.
- Served from AS13335 (Cloudflare), a shared network that says nothing about the site's operator.
- TLS certificate issued by WE1 (DV), valid to 2026-12-02 with 36 days remaining; domain-validated encryption only confirms control of the domain and does not establish the operator's identity or intent.

### What to Verify Next

Do not submit credentials, connect a wallet, sign any transaction, or enter recovery phrases on this site. Anyone who received a link to it should confirm whether any "Community Day", vote, or allocation event exists by going directly to the official channels of the project it references, using independently sourced addresses rather than this link. Any contact received alongside the link, such as a message, post, or email, should be treated as unverified. It should be reported to the platform it came through. Users who already interacted with the page should review wallet approvals, revoke any suspicious permissions, and consider moving assets to a fresh wallet. Evidence:

- The homepage presents a vote-and-claim flow under an XRP Community Day banner, with no way to authenticate it on the page itself.
- The sandbox runs did not trigger any wallet-connection prompt, wallet-drainer behaviour, or clipboard manipulation. The claim flow's full behaviour was therefore not exercised, and the absence of these behaviours is not reassurance.

### Summary Verdict

The site presents an elevated, clearly cautionary risk posture. Confirmed adverse security detections, a newly created domain with no operating history, and an unverified connection to the brand it evokes outweigh the baseline technical hygiene it shows. Its real-world operator has not been independently verified, and the available evidence is not consistent with treating the site as legitimate.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are Cloudflare edge servers, and the origin server was not observable. This mainstream protection is a mitigating factor only and cannot offset the reputation findings. Edge-only visibility also prevents independent hosting verification and can mask rapid content changes. One visible negative signal sits here: 24 abuse reports logged against the shared Cloudflare edge address 2a06:98c1:3120::b (a Content Delivery Network address, with an abuse confidence score of 0 and a whitelisted status). Because those reports apply to Cloudflare's shared provider infrastructure rather than to this site specifically, they have been discounted and carry no weight against the site.


### Closing Assessment

Read-only viewing is the only use that fits the current evidence. Logins, credential entry, wallet connections, and any financial action should be avoided entirely until the domain is cleared by credible independent sources.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership, behaviour in a sandbox.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Registration and ownership
- The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`)

### 05 Behaviour in a sandbox
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)
- The page sent data to a destination TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_POSTS`)

### Signals weighed against the site

- AbuseIPDB: 24 reports on hosting IP 2a06:98c1:3120::b (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 15% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of vote-xaman.org.

- The request stayed on vote-xaman.org. It was not redirected to another domain. (Clear)
- Registration is published under Key-Systems GmbH. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-06. (Noted)
- The earliest public archive of this site is from 2026-08-07. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Key-Systems GmbH |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2a06:98c1:3120::b |
| Name servers | dayana.ns.cloudflare.com, doug.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-02 |
| Domain age | 0.31 years (continuous registration) |
| Domain expiry | 2027-07-06 |
| Archive first seen | 2026-08-07 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 18 flagged \| AbuseIPDB: 0% confidence, 24 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about vote-xaman.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [polinexclient.org](https://trustsniffer.com/report/polinexclient.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [p-edukul.org](https://trustsniffer.com/report/p-edukul.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [dcnvda.org](https://trustsniffer.com/report/dcnvda.org), another .org site assessed as critical-risk (Critical Risk, 19/100)
- [bangabandhuonline.org](https://trustsniffer.com/report/bangabandhuonline.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [coffeecatcafe.org](https://trustsniffer.com/report/coffeecatcafe.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [qualityexpressllc.org](https://trustsniffer.com/report/qualityexpressllc.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [tptkn.org](https://trustsniffer.com/report/tptkn.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [gninepal.org](https://trustsniffer.com/report/gninepal.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [alsheikhhospital.com](https://trustsniffer.com/report/alsheikhhospital.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [duckingproxy.eu](https://trustsniffer.com/report/duckingproxy.eu), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/vote-xaman.org) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/vote-xaman.org · assessed 2026-10-27.*