Is hadaarts.com a scam? TrustSniffer's high-risk assessment: 3/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

HadaNFT is a single-page website whose page title reads "HadaNFT — Priority Allocation Program". It presents itself on its homepage as an NFT-themed allocation program, apparently inviting visitors to take part in a priority allocation of digital assets. The site is hosted on a recently registered domain and appears to be a promotional or sign-up front for that program, not an established, independently verifiable business.

Scam/Impersonation Risk

Contradictory signals are present, and they drive the overall posture. Multiple independent threat-intelligence engines currently flag the domain as malicious or suspicious, including a tier-one security vendor, and the domain is blacklisted on that basis. No impersonation of a specific brand and no conflicting legal identities were observed, and the site's behavioral profile showed no wallet-drainer activity, clipboard manipulation, hidden forms or cloaking. The risk therefore rests on the external detections, the newness of the domain, and the page's runtime behavior. During automated interaction, the homepage sent several background requests to third-party destinations outside the expected trusted set. Three of these were data submissions (POST requests) to non-whitelisted external endpoints, and external traffic made up most of the page's request activity. A promotional "priority allocation" framing for NFTs is a common lure pattern: it creates urgency around limited access to digital assets and invites visitors to share data or connect assets. Combined with blacklist hits on a months-old domain, this is a pattern that warrants a clearly cautionary stance. No confirmed phishing page or brand clone was established from the evidence supplied. Evidence:

• Homepage: external reputation checks returned five malicious and four suspicious verdicts, with a tier-one vendor among the flagging sources.
• Homepage runtime behavior: six external XHR/fetch requests and three non-whitelisted external POST submissions across three sandbox runs, with a peak external-request share of about 71%.
• Domain provenance: registered 2026-07-03 (~0.32 years old, roughly four months), with a single web-archive snapshot from 2026 (first and last seen 2026-07-11; 1 year tracked).

Regulatory Verification Notes

The site presents no regulatory standing that could be checked. No licensing, registration or supervisory status is established through any third-party source, and no match exists in broker-reputation datasets. The domain's registrant details are incomplete, which leaves ownership opaque and the real-world operator unconnected to the site. This is a verification gap, not itself proof of wrongdoing, but here it sits alongside confirmed threat detections and so cannot be treated as an administrative detail. An NFT allocation program that solicits participation or value would ordinarily be expected to identify its legal operator and terms. The evidence does not show that the homepage does so. No third-party warning is presented as a legal or licensing verdict. Evidence:

• Domain registration: registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-07-03.
• Homepage: the captured page (about 5,000 characters of text) was examined, and the evidence shows no identified operator, license or registration reference.
• Digital-asset registries: the domain is not recognized in the DeFi protocol directory, so no TVL or market-capitalization figure is available to corroborate any claimed activity.

What to Verify Next

The priority is independent confirmation that the program exists and that this domain belongs to it. Any claim of association with a named NFT project should be checked through that project's officially announced channels, reached by a route other than this site. The legal entity behind the program should be confirmed through a corporate registry, together with any regulatory status the program claims. Official support and contact channels should also be confirmed independently. The domain should be re-checked against threat-intelligence sources, and any cleanup or delisting confirmed, before the site is reconsidered for any interaction. Until then, none of these checks should be performed through links or instructions taken from the site itself. Evidence:

• Homepage: the program is described only through the site's own promotional framing, so independent confirmation is needed from outside the site.
• Web archive: only one capture exists, from 2026, so no earlier history is available to show the program is long-standing.
• External reputation: current detections are unresolved, so a later delisting would be the first meaningful change in this assessment.

Summary Verdict

The available evidence converges on an elevated-risk, clearly cautionary posture. A very new domain, current blacklist listings from several detection sources, and third-party data submissions from the page together outweigh the site's technically valid transport security. The site's real-world operator remains unconfirmed, and nothing in the evidence offsets the external threat findings.

Infrastructure Integrity

The site is served behind Cloudflare's CDN and WAF (AS13335, US), and all four observed addresses are Cloudflare edge servers. The origin server was not observable, which prevents independent verification of the real hosting and can mask rapid content changes. The site uses a valid domain-validated TLS certificate issued by WE1, valid to 2026-11-29, so the connection is encrypted. This is a mitigating factor only. It proves nothing about the operator's legitimacy and does not offset the external threat detections.

Closing Assessment

Login, credential entry, wallet connection and any payment or other financial interaction with this site should be avoided. Any visit should be treated as strictly read-only and kept to an isolated, non-sensitive environment.