Is nutsynft.art a scam? TrustSniffer's high-risk assessment: 16/100

Overview

This website presents itself as "Quiver", an NFT exchange built for Robinhood Chain. It is a single-page, wallet-oriented digital-asset marketplace on the recently registered nutsynft.art domain. Its apparent business model is NFT trading and listing, which depends on visitors linking wallets and moving digital assets.

Scam/Impersonation Risk

The assessment is clearly cautionary. Several independent threat-intelligence sources flag the domain, and some classify it as malicious. This is a confirmed blacklist condition. It is the decisive factor in the assessment, and no other positive signal offsets it. The domain's profile also matches a short-lived, high-risk archetype. Its brand-adjacent positioning, an "exchange" aimed at the Robinhood Chain ecosystem, would give a new and unknown operator borrowed credibility. No brand impersonation or conflicting legal-entity names were confirmed in the evidence. Behavioural testing of the homepage found no wallet-drainer activity, no clipboard tampering, no hidden or externally posting credential forms, and no cloaking. Outbound traffic was heavy, however. Most requests went to third-party destinations, and every sampled run issued external POST requests, although all were to recognised destinations. That pattern is consistent with a script-heavy front end but does not clear the reputational listing. NFT exchange mechanics inherently involve wallet signatures and token approvals, which makes a flagged domain especially dangerous: a malicious approval can empty a wallet without any password being entered. Evidence:

• Homepage: titled as an NFT exchange for Robinhood Chain, with a small amount of page text and no further observable product detail.
• Domain provenance: registered in July 2026 (~0.28 years old), and the web archive holds only 2 snapshots, dated 2026-09-20 to 2026-09-22.
• Threat intelligence: multiple engines return malicious and suspicious detections for the domain, and an external blacklist listing is active.
• Homepage behavioural runs: 3 of 3 successful runs, with 12 external network requests, 6 external POSTs and 0 non-whitelisted destinations.

Regulatory Verification Notes

No licensing, registration or regulator information could be tied to the operator in the evidence reviewed, so the real-world identity behind the exchange remains unestablished. The site is presented as an exchange for digital assets. Operators of such services would normally be expected to publish a legal entity, jurisdiction and terms of service. Nothing in the available evidence connects the site to a regulated or independently recognised entity. No third-party broker-reputation database lists it, which is neutral context rather than a verdict either way. The domain was registered through Spaceship, Inc., and its transport encryption is a basic domain-validated certificate. A certificate of this kind confirms only that the connection is encrypted and says nothing about who operates the site. Evidence:

• Hosting and network: served from AS13335 (Cloudflare, Inc., US).
• TLS: certificate issued by WE1 (DV), valid to 2026-12-11.
• Registration: domain created 2026-07-11, expiring 2027-07-11, registrar Spaceship, Inc.
• DeFi coverage: the domain is not listed in the DeFi protocol directory consulted, so no recognised protocol or TVL could be attached to it.

What to Verify Next

Treat the site as unsafe for any transactional use until the reputational listing is resolved. Anyone with a reason to engage should confirm through Robinhood Chain's own official channels, reached independently of this site, whether any NFT exchange named Quiver exists and which domain it officially uses. Operator identity, jurisdiction and any licensing claim should be checked against public registries rather than against the site's own statements. Support and contact channels should be confirmed through an independent route before any communication. If a wallet has already been connected to this domain, token approvals should be reviewed and revoked with a reputable allowance-checking tool, and the wallet's exposure should be assessed. Evidence:

• Homepage: no operator, jurisdiction or legal entity could be established from the page content.
• Domain history: the very short and sparse history means no prior independent footprint exists to corroborate the brand.
• Reputation: active threat listings mean the domain must be re-checked after any claimed remediation.

Summary Verdict

The overall posture is high-risk. Confirmed external threat detections drive this conclusion and outweigh the clean technical behaviour observed. Operator identity is unverified, and the domain's age and history are too thin to support any established-entity reading. The site should be regarded as a hazardous destination for any activity involving credentials, wallets or funds.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and all observed addresses are edge servers. The origin server could not be observed. This is a mitigating factor only. It shows ordinary professional-grade delivery and bot protection, but it does not indicate legitimacy. Edge-only visibility also prevents independent hosting verification and allows content to be swapped quickly behind the same address. An unconfirmed heuristic notes some fragmentation in the infrastructure, which does not change the assessment. The protection cannot offset the threat-intelligence listings.

Closing Assessment

Limit any interaction to passive, read-only viewing. Do not connect a wallet, sign any message or transaction, grant token approvals, log in, or send funds or credentials to this site. Revisit the assessment only if reputable threat-intelligence sources remove the listing and the operator is independently identified.