Is voted-xaman.org a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website voted-xaman.org is a single-page crypto-community landing site titled "Xaman – XRP Community Day | Vote & Claim Your Allocation". It uses the name of a well-known XRP wallet brand and invites visitors to take part in a community vote and claim a token allocation. Its apparent purpose is to draw visitors into a claim-style interaction. The page content was only partly captured, because an automated-access challenge stood in front of the page. The title and the page's behavior are therefore the main observable content.

Scam/Impersonation Risk

This assessment carries an explicitly cautionary posture because confirmed contradictions are present. Major security vendors and a browser-protection service currently flag the domain as malicious, and the browser-protection classification is social engineering. That is the category used for phishing and deceptive-lure sites. Together with an external blacklist finding, this makes the site blacklisted across several independent sources. The homepage combines a recognised wallet brand name with a "vote and claim your allocation" call to action. This lure pattern is common in crypto-claim campaigns that aim to push visitors toward wallet connection or credential disclosure. The site's identity could not be independently tied to the brand it evokes. The brand-linked wording therefore cannot be treated as evidence of any real association.

In the behavioral sandbox, the page did not trigger wallet-connection prompts, drainer behavior, clipboard manipulation, hidden forms or cloaking. These absences do not offset the external threat findings. The page did issue several outbound data submissions to third-party destinations that are not on any recognised-service list, and it logged repeated script errors. A page this young that sends data to unrecognised external endpoints warrants treatment as a data-collection risk. No contradictory legal-entity names were observed, so the concern comes from threat detections and the nature of the lure, not from conflicting corporate identities.

Regulatory Verification Notes

The captured page content did not allow any licensing, registration or legal-entity disclosure to be assessed. No regulated-entity status could be corroborated, and no third-party broker record matches the site. The site therefore has no recognised standing to which a claim of authority could be tied, and any financial or token-distribution activity it offers is unsupported by an observable regulatory basis. The domain is registered through a corporate registrar, Key-Systems GmbH. This is an administrative fact and does not offset the threat findings. The transport certificate is domain-validated only, so it proves control of the domain and says nothing about the identity of whoever operates it.

What to Verify Next

Any claim of an XRP community vote or token allocation should be checked through the wallet brand's own announcements, reached by independently typed addresses or official social channels, never through links from this site. The site's contact channels should be confirmed through a separate, independent route. If a visitor already interacted with the site, wallet approvals should be reviewed and any suspicious permissions revoked. Credentials entered should be rotated, and wallet security teams or the relevant brand's support should be told. The domain can also be reported to the hosting provider and to browser-protection services, which helps takedown.

Summary Verdict

The site presents an elevated, high-risk posture. Independent threat intelligence confirms malicious classification, and this is reinforced by the domain's very recent creation, a minimal history and a lure typical of crypto-claim campaigns. Technical hygiene such as a valid certificate does not change that conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF and is served from AS13335. All observed addresses are edge servers, and the origin host was not observable. This protective layer is a mitigating factor only. It prevents independent confirmation of where the content is hosted, and it cannot offset the external threat detections. A valid DV certificate from WE1 confirms encrypted transport, not trustworthiness.

Closing Assessment

Treat the site as unsafe for any interaction involving wallets, logins, seed phrases, credentials or payments. Do not connect a wallet, sign a transaction or enter personal data. If the site was already visited, apply the remediation steps above promptly.