---
title: "Is xautstaking.com a Scam? Trust Score 15/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "xautstaking.com"
verdict: "Critical Risk"
title: "Is xautstaking.com a Scam? Risk Report, Score 15/100"
trust_score: 15
classification_confidence: 70
canonical_url: https://trustsniffer.com/report/xautstaking.com
assessed: 2026-10-26
---

# Is xautstaking.com a scam? TrustSniffer's high-risk assessment: 15/100

## Verdict


**Verdict: Critical Risk, trust score 15/100.** xautstaking.com shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk

Assessed 2026-10-26 by automated analysis. Classification confidence 70%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 4 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (5 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the xautstaking.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xautstaking.com/screenshots/first.png)

_What xautstaking.com served when TrustSniffer captured it on 2026-10-26. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website presents itself as a staking and bridging service for Tether Gold (XAUt). Its homepage title promises that visitors can "stake, earn & bridge" the token across five blockchain ecosystems: EVM networks, TRON, SUI, XRP and Solana. The apparent business model is a crypto-asset yield and cross-chain transfer platform that invites visitors to commit tokenised-gold holdings to the service in return for rewards.

**Scam/Impersonation Risk:** This is an elevated-risk, cautionary assessment. The domain is **currently blacklisted** by external reputation sources, and multiple independent security engines classify it as malicious, with a further engine rating it suspicious. This is a confirmed contradiction, not a speculative concern. The conduct pattern is consistent with a staking-themed lure: the domain name itself embeds a third-party token's identity, and the homepage promises yield on a high-value, gold-backed asset across five chain families. Nothing in the evidence ties the operator to the token's issuer or to any recognisable institution, and the real-world identity behind the site remains unestablished. The domain is only a few months old and has almost no historical footprint, so there is no track record to offset the reputation findings. In the sandbox, the homepage returned stable pages, showed no cloaking and made no unusual outbound transmissions. That is consistent with a static front end and does not outweigh the blacklist. No conflicting legal entities were observed. Evidence:

**Regulatory Verification Notes:** No independent source establishes regulatory standing for a service that offers custody-like staking and cross-chain bridging of a tokenised commodity. Reviewing the homepage, no operator identity could be independently tied to the site, and no third-party regulatory registration was found. This is a verification gap that gains weight only because it sits alongside the confirmed blacklist; on its own it would not be evidence of wrongdoing. A broker-reputation database returned no match, which is neither reassuring nor adverse. The platform is also not recognised in public DeFi protocol directories. A protocol that markets staking yield would normally be expected to appear there once it holds meaningful deposits. Evidence:

**What to Verify Next:** Before any interaction, the staking and bridge offering should be matched against the official channels of the genuine token issuer, reached by an independent route such as a known official website or published announcement, not via links on this site. Any claimed operating company, licence or audit should be checked directly with the relevant registry or auditor. The official support and contact channels should be confirmed through an independent route. The current external threat listing should also be re-checked on the day of any intended contact, since reputation status can change. Evidence:

**Summary Verdict:** The site is assessed as a high-risk web property that is unsuitable for sensitive interaction. Its newness, the absence of an independently verifiable operator and the active adverse reputation findings converge on a cautionary posture. The technical hygiene of the site does not change that conclusion.

**Infrastructure Integrity:** The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node, so the origin server could not be seen. This is a mitigating factor only: it shows the site is professionally fronted and protected, but it neither proves legitimacy nor offsets the reputation findings. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps.

**Closing Assessment:** The site should not be used for login, credential entry, wallet connection or any transfer of funds. At most, read-only viewing is appropriate, and any financial decision should rest on the genuine issuer's official channels instead.

- Domain registered 2026-06-16 (~0.36 years old), through the registrar Atak Domain.
- Web archive holds 5 snapshots, all from 2026, first seen 2026-08-31; there is no earlier history.
- Homepage title advertises staking, earning and bridging of XAUt across EVM, TRON, SUI, XRP and Solana.
- Behavioral sandbox runs on the homepage were stable (3 of 3 successful) with no cloaking or console errors, which is a minor mitigating observation only.
- Hosting network: AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1 at domain-validated (DV) level, valid to 2027-01-11. DV validates domain control only, not the operator's identity.
- Not listed in a public DeFi protocol directory, so no TVL figure can be corroborated.
- No regulator-sourced registration was found for the domain.
- Homepage staking and bridge claims have no independent corroboration in the available evidence.
- The external threat listing was active at the time of analysis.
- No operator identity is independently confirmed for the site.

_Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 03 Behaviour in a sandbox
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of xautstaking.com.

- The request stayed on xautstaking.com. It was not redirected to another domain. (Clear)
- Registration is published under Atak Domain. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-06-16. (Noted)
- The earliest public archive of this site is from 2026-08-31. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Atak Domain |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:4d81 |
| Name servers | MAREK.NS.CLOUDFLARE.COM, MAXINE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-11 |
| Domain age | 0.36 years (continuous registration) |
| Domain expiry | 2027-06-16 |
| Archive first seen | 2026-08-31 |
| Archive snapshots | 5 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about xautstaking.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [fastsrunners.com](https://trustsniffer.com/report/fastsrunners.com), another .com site assessed as critical-risk (Critical Risk, 8/100)
- [golddigapp.com](https://trustsniffer.com/report/golddigapp.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [rainbet.com](https://trustsniffer.com/report/rainbet.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [archivoscrosoft.com](https://trustsniffer.com/report/archivoscrosoft.com), another .com site assessed as critical-risk (Critical Risk, 1/100)
- [cheetoclient.com](https://trustsniffer.com/report/cheetoclient.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [floppaclient.com](https://trustsniffer.com/report/floppaclient.com), another .com site assessed as critical-risk (Critical Risk, 5/100)
- [kryptonclient-donutsmp.com](https://trustsniffer.com/report/kryptonclient-donutsmp.com), another .com site assessed as critical-risk (Critical Risk, 5/100)
- [familyaddons.com](https://trustsniffer.com/report/familyaddons.com), another .com site assessed as critical-risk (Critical Risk, 5/100)
- [boredapeyachtclubmemberverify.com](https://trustsniffer.com/report/boredapeyachtclubmemberverify.com), another .com site assessed as critical-risk (Critical Risk, 2/100)
- [ansemsol.com](https://trustsniffer.com/report/ansemsol.com), another .com site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/xautstaking.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xautstaking.com · assessed 2026-10-26.*