Is xmanliquid-globe.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site, titled "XAMAN Allocation & Liquidity Rewards Program — $XRP", on a domain that combines the "xaman" and "globe" names. It presents itself as a cryptocurrency allocation and liquidity-rewards programme tied to the XRP token. The apparent purpose is to draw visitors into claiming or participating in a token rewards scheme, and no operating company or product is identified.

Scam/Impersonation Risk

This site carries confirmed, serious contradictory signals. A major browser-safety service flags the domain for social engineering, and numerous independent security engines classify it as malicious. Several leading security vendors are among them. The domain is therefore blacklisted by multiple independent sources. That corroboration is the decisive factor in this assessment. The promotional framing is the kind commonly used to lure holders of a popular digital asset into rewards claims. The domain name and page title borrow the "Xaman" name and the $XRP ticker, and nothing in the evidence links the site to any legitimate wallet provider or token issuer. No conflicting legal-entity names were observed, and no direct brand-impersonation finding was recorded. Even so, a freshly registered, blacklisted domain that trades on an established crypto brand should be treated as a probable social-engineering lure. In sandbox testing, the site made unprompted outbound POST requests to external hosts outside the expected service set. No wallet-connection prompts, clipboard manipulation, hidden forms or content cloaking were triggered during the test runs. Evidence:

• Homepage: the title promotes an "Allocation & Liquidity Rewards Program" denominated in $XRP and uses the Xaman name, with no verifiable operator or affiliation.
• Reputation: a browser-safety service flags the domain for social engineering, and its threat category is consistent with a credential or asset lure.
• Domain provenance: registered 2026-08-01 (~0.24 years old); 3 archive snapshots spanning 2026-08-10 to 2026-09-22 (1 year tracked), so the site has no established history.
• Behavioural testing: 3 external POST requests to non-whitelisted hosts across 3 successful runs, with no wallet-drainer or clipboard-hijack activity observed.

Regulatory Verification Notes

The evidence shows no licence, registration or regulatory standing that would support a financial rewards or token-allocation offer. No third-party regulatory or broker-reputation match was found for the site. Operator identity could not be independently connected to any real-world person or organisation. Registration details are incomplete, which indicates ownership opacity. That is an administrative limitation and not an identity contradiction, but it removes any ownership accountability that might otherwise offset the reputational findings. A token-reward scheme that solicits participation without disclosing a responsible legal entity does not meet the transparency a regulated financial activity would require. Evidence:

• Registrar: NICENIC International Group Co., Limited, with registration valid to 2027-08-01 and owner details incomplete.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by WE1 as a domain-validated (DV) certificate, valid to 2026-12-28. A DV certificate confirms only control of the domain, not the operator's identity.
• Homepage: no operating company, licence or registration reference was identified.

What to Verify Next

Anyone who has already interacted with the site should treat the situation as a possible compromise. Rotate any credentials that were entered. Review wallet token approvals and revoke any that were granted. Check the account for unexpected transactions. Confirm the genuine Xaman and XRP programmes only through the official channels published by the legitimate providers, reached independently of this site, and not through links or messages that led here. Check whether this programme is mentioned anywhere on those official channels. Treat any unsolicited message, advertisement or social post that promoted this site as suspect. Evidence:

• Homepage: the programme is promoted under the Xaman name, so the legitimate provider's official announcements are the proper reference point.
• Security status: independent warnings from the browser-safety service and multiple security engines are currently active against this domain.
• Domain age: registered 2026-08-01, so no long-standing programme or relationship can be assumed.

Summary Verdict

The site's overall trust posture is critical. The negative security signals are decisive, and nothing else in the evidence offsets them. Its characteristics are consistent with a short-lived social-engineering or asset-solicitation operation, not an established, accountable service. No assurance of legitimacy can be given for any sensitive interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, with a valid TLS certificate. All observed addresses are CDN edge nodes, and the origin host could not be observed. This is a mitigating factor only. It limits independent verification of the real hosting and can mask rapid content changes, and it does not offset the active threat detections. Commodity protective infrastructure is routinely used by both legitimate and abusive sites, so it carries no weight as proof of legitimacy.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial transaction. At most it may be viewed passively, and only from an isolated, non-essential browser profile that holds no wallet or saved credentials. Organisations should consider blocking the domain and reporting it to the relevant abuse and security-reporting channels.