Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
portal-tart.com shows high-risk / scam indicators.
| What this site appears to be | TartSwap page offering an October TART token reward claim for wallets that held TART at a snapshot. Users connect a wallet, check eligibility, and sign a claim transaction on BNB Smart Chain. The page links to staking, farms, and token purchase, but gives no verifiable contract, audit, legal entity, or distribution rules to support the claim before a financial transaction is requested. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website at portal-tart.com presents itself as TartSwap, a decentralized-finance interface on BNB Smart Chain. Its landing page is a "Claim October Rewards" screen that invites visitors to connect a crypto wallet, check whether the wallet held the TART token at a snapshot, and sign a claim transaction. It also links to liquidity, farms, staking and TART purchase pages. The apparent business model is token-based: it drives wallet activity around TART and distributes monthly "October rewards" to qualifying holders.
Scam/Impersonation Risk
The evidence shows a confirmed contradiction, so this assessment is clearly cautionary. A security vendor has flagged the domain as malicious, and further engines rate it suspicious, which amounts to a confirmed external blacklist hit. The site is also very new: its registration is only days old, and it already asks visitors for a financial transaction. The homepage asks visitors to connect a wallet through MetaMask, WalletConnect, Trust Wallet or Binance Wallet. It then asks them to sign a claim transaction, promising "Non-custodial", "No fee to claim" and "Window open" for an "October distribution · live". These assurances are self-asserted. The page publishes no contract address, audit, snapshot details, allocation rules, or source of reward funds. Pairing an urgent reward claim with a transaction-signing request and no checkable proof is the pattern used in wallet-drain and fake-airdrop schemes. The reassurance "never asks for your seed phrase" does not address the real exposure, which is a malicious signature or token approval. The page shows no on-site brand impersonation, identity conflict or confirmed phishing content. The relationship of this "portal" domain to any established TartSwap project is not independently confirmed.
- Domain registration: created 2026-10-09 (about 11 days old) through NICENIC International Group Co., Limited.
- Homepage: a wallet-connect prompt and a claim-transaction signing request, with no contract address, audit or distribution rules published.
- Homepage: the "OCT 2026 · CLAIM / Window open" banner and the "Non-custodial / No fee to claim" badges are unsupported by any verifiable documentation.
- External reputation: one malicious and two suspicious detections from threat-intelligence engines, including a major security vendor.
Regulatory Verification Notes
The homepage footer shows only "© 2026 TartSwap". It names no legal entity, registered address, jurisdiction, licence or registration number, and it gives no verifiable contact route. The page carries no statement about regulatory status for a service that handles token claims, staking and farming. These are disclosure gaps in a high-stakes financial context. Governance and ownership are unclear, and nothing on the site lets a visitor connect it to an accountable operator. No third-party broker or regulator record matches this site, and no licence is claimed. The site's real-world operator therefore remains unverified.
- Homepage footer: the copyright line names only the "TartSwap" brand, with no legal entity or registration details.
- Homepage: no terms, privacy policy, risk disclosure or accountable-party information was observed for the staking and farming features.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: a TLS certificate issued by YE2 (DV, domain validation only), valid to 2027-01-07. This confirms an encrypted connection but says nothing about the operator.
What to Verify Next
Before any interaction, confirm whether a TART reward distribution exists at all. Use the project's official channels, reached independently of this site, such as a separately sourced official domain, an announcement route that can be checked offline, or the project's documented social accounts. If a claim contract is cited, independently check its address and verification status on a public BNB Smart Chain explorer. Check whether the address comes from a trusted source rather than from this page. Confirm the official support and contact channels through that same independent route. Confirm any operator identity and licensing claim with the relevant registry.
- Homepage: it offers a "View on BscScan" link only after a claim, so no contract can be checked beforehand.
- Homepage: the reward snapshot date and eligibility criteria are not stated, so they cannot be compared with any official announcement.
- Domain registration: the site is about 11 days old, so no long-standing record can corroborate it.
Summary Verdict
Available evidence places this site in an elevated-risk category. A confirmed external blacklist hit, a brand-new domain, and a financial transaction request unsupported by any verifiable proof reinforce one another. Sound transport encryption and well-built page content do not offset the reputational and structural risk. The site cannot be treated as trustworthy for sensitive or financial use.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server was not observable. This is a modest mitigating factor, because it shows ordinary commercial protection and basic bot filtering. It cannot confirm legitimacy or offset the threat detections. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes. A heuristic flag for a young domain with sparse subdomains is consistent with a very recent deployment, but it is unconfirmed.
Closing Assessment
Do not connect a wallet, sign any transaction, grant a token approval, or enter credentials on this site. Any wallet already connected should be disconnected and its token approvals reviewed. If reward eligibility matters, check it only through official channels confirmed independently of this domain. Read-only viewing is the only proportionate use.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, hosting and network.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of portal-tart.com.
- The request stayed on portal-tart.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-09. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::6815:140 |
| Name servers | BILL.NS.CLOUDFLARE.COM, LOLA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-07 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | 2027-10-09 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about portal-tart.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.