--- title: "Is xamanswap.com a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "xamanswap.com" verdict: "Critical Risk" title: "Is xamanswap.com a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/xamanswap.com assessed: 2026-10-20 --- # Is xamanswap.com a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** xamanswap.com shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk Assessed 2026-10-20 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | XamanSwap presents itself as a non-custodial DEX on the XRP Ledger offering swaps, cross-chain XRP bridging, AMM liquidity pools with advertised APYs of 14–32%, and XRP activity rewards. Its trust claims are contradicted by bridge custody and staking wording, and it provides no audit, legal identity or contact details. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 11 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 3 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the xamanswap.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xamanswap.com/screenshots/first.png) _What xamanswap.com served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. XamanSwap (xamanswap.com) presents itself as a non-custodial decentralized exchange on the XRP Ledger. Its single-page web app and marketing landing page offer token swaps, cross-chain XRP bridging, liquidity pools with advertised yields, and "Earn XRP" activity rewards, all reached by connecting a wallet. Its apparent business model is a stated 0.3% protocol fee on swaps. The site says this fee is passed to liquidity providers and reward holders, and promotional yields and rewards are used to draw in wallet connections and deposits. ### Scam/Impersonation Risk The site carries confirmed contradictions and is **blacklisted** by multiple major threat-intelligence engines, including several tier-one security vendors. This external detection is the decisive risk factor. Protective infrastructure and a valid certificate cannot offset it. The product claims add to the concern. The homepage advertises pool APYs of 14–32%, weekly "Earn XRP" rewards for every swap, pool deposit and bridge, and a "$2.4B+ volume traded" counter. It also advertises "100+ tokens live" and a "your keys, your funds" non-custodial promise. None of these figures is backed by an audit, a data source or a named operator. The reward payments are said to come only from "protocol fees", so the site gives no verifiable source for the yield it promises. The page also contradicts itself. It claims non-custody, yet the bridge section states the bridged XRP is held under Hex Trust institutional custody and depends on LayerZero. It also disclaims staking, yet elsewhere invites visitors to "Stake XRP to earn protocol revenue". The brand name borrows "Xaman", the name of an established XRP wallet, on an unofficial domain with no verifiable affiliation. No brand impersonation was confirmed, and no conflicting legal identities were found. Visitors are nonetheless steered toward connecting a wallet and depositing funds before any accountability is established. Evidence: - Homepage: the headline "Your keys. Your funds. Always." and the non-custodial claim conflict with the bridge section's statement of Hex Trust custody and LayerZero dependence. - Homepage: the "Stake XRP to earn protocol revenue" wording conflicts with the site's own "no staking" assertion. - Homepage: pool APYs of 14–32%, live "Earn XRP" rewards and a "$2.4B+ volume" counter appear with no audit, no reward-funding source and no verifiable data. - Domain registered 2026-07-18 (~0.25 years old). The web archive holds a single snapshot, dated 2026, so there is no long operating history behind the volume and yield claims. ### Regulatory Verification Notes The site discloses no legal entity, licence, registration number, jurisdiction, audit or contact channel, and it publishes no terms or about page that identifies an operator. For a platform that invites wallet connections, token swaps, cross-chain bridging and liquidity deposits, this missing information leaves its regulatory standing unverifiable. This is a disclosure gap in its own right. It does not prove wrongdoing, but together with the external blacklisting it removes any basis for assuming accountability. No third-party broker or regulatory-registry match exists for the site, and the registrant is recorded only as a generic domain administrator. Real-world identity therefore remains unverified. Evidence: - Homepage: no legal entity, licence authority, registration number, audit report or physical address is presented. - The site shows no contact channel, and the domain is registered through the registrar Atak Domain. - Hosting is served from AS13335 (Cloudflare, US). TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-14. - No recognised DeFi-protocol listing exists to corroborate the claimed volume or locked value. ### What to Verify Next Any engagement should start from the position that the platform is unproven. The bridge custodian and the cross-chain messaging provider named on the homepage should each be asked, through their own official channels, whether they have any relationship with this site. The official Xaman wallet publisher should be asked whether it recognises this domain or the brand name. The advertised yields, the weekly reward mechanism and the volume figure should be checked against independent on-chain data rather than the site's own counters. A smart-contract audit and a named, registered operator should also be sought, and the absence of both should be treated as disqualifying for any fund deposit. Official support channels should be confirmed independently of the site. Evidence: - Homepage: the Hex Trust and LayerZero references can be tested directly with those providers. - Homepage: the "$2.4B+ volume traded" and "100+ tokens live" claims can be tested against independent public blockchain data. - Homepage: the name "Xaman" appears on a domain with no demonstrated link to the original wallet brand. ### Summary Verdict Available evidence supports a high-risk assessment of xamanswap.com. Confirmed external threat detections, a very recently created domain and promotional claims that are self-contradictory and unverifiable all point the same way. These signals converge, and the weak technical hygiene seen elsewhere does not offset them. The site cannot currently be regarded as trustworthy for any financial or credential-bearing interaction. ### Infrastructure Integrity The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The real origin server is not exposed, so hosting cannot be independently attributed to the operator, and content could be changed quickly behind the edge. The protection and the valid domain-validated certificate are mitigating factors only. They show the transport is encrypted and the site is shielded from some attacks. They say nothing about the legitimacy of the operator or the platform. ### Closing Assessment Wallets should not be connected to this site, and no funds, seed phrases or signing approvals should be committed to it. Viewing the pages passively is the only reasonable use until independent audits, a verifiable operator and a clean external reputation exist. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by external reputation, hosting and network, page content, history in the web archive. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 03 Page content - The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`) - The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of xamanswap.com. - The request stayed on xamanswap.com. It was not redirected to another domain. (Clear) - Registration is published under Atak Domain. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-07-18. (Noted) - The earliest public archive of this site is from 2026-07-22. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Atak Domain | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3033::6815:4e28 | | Name servers | IAN.NS.CLOUDFLARE.COM, LINDSEY.NS.CLOUDFLARE.COM | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2026-12-14 | | Domain age | 0.25 years (continuous registration) | | Domain expiry | 2027-07-18 | | Archive first seen | 2026-07-22 | | Archive snapshots | 1 | | Reputation | VirusTotal: 11 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about xamanswap.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [dexscreenervotes.com](https://trustsniffer.com/report/dexscreenervotes.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [axiomdesktop.com](https://trustsniffer.com/report/axiomdesktop.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [kuatex.com](https://trustsniffer.com/report/kuatex.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [loyalty-xrpl.com](https://trustsniffer.com/report/loyalty-xrpl.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [pons-live.com](https://trustsniffer.com/report/pons-live.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [live-pons.com](https://trustsniffer.com/report/live-pons.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [baseweb3wallets.com](https://trustsniffer.com/report/baseweb3wallets.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [vet-xrplf.com](https://trustsniffer.com/report/vet-xrplf.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [dressmaster.lk](https://trustsniffer.com/report/dressmaster.lk), another site assessed as critical-risk (Critical Risk, 0/100) - [a551008.cc](https://trustsniffer.com/report/a551008.cc), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) - [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23) - [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether) --- *Source: [TrustSniffer](https://trustsniffer.com/report/xamanswap.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xamanswap.com · assessed 2026-10-20.*