Is rhgame.fun a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website, served from the rhgame.fun domain, is a single-entry web property branded "RobinHoodz" with the tagline "Rob the Rich. Feed the Reserve." Its homepage loads normally and carries a modest amount of text. The name and slogan evoke a Robin Hood-style redistribution theme, and the .fun domain points to a game or entertainment concept. The captured material does not establish a concrete product, service, or business model, so the site's purpose cannot be confirmed from the evidence.

Scam/Impersonation Risk

The central concern is a confirmed blacklist presence. Several independent security engines classify the domain as malicious, and an external blacklist source corroborates this. This is the decisive risk driver and it caps the assessment at the lowest tier. No identity contradiction, brand impersonation, or phishing page was confirmed, and the homepage presents a single brand with no conflicting legal entities. The flags are therefore reputational and threat-based, not identity-based. The domain's age compounds the concern. It was registered only a few months ago, and its web-archive footprint is a single, very recent capture, so there is no track record to offset the flags. Behavioral testing was largely unremarkable. Page loads were stable, no wallet-connection prompts, clipboard manipulation, hidden forms, or content cloaking were seen, and no traffic went to non-whitelisted third-party destinations. However, about half of observed requests went to external hosts, which is high for a single-page site. These clean behavioral results do not outweigh the threat-intelligence detections. Evidence:

• Homepage and domain-level reputation: four security engines flagged the domain as malicious and one as suspicious, alongside a corroborating external blacklist hit.
• Domain provenance: registered 2026-07-16 (~0.28 years old) through GoDaddy.com, LLC, with registration details held behind a privacy service.
• Archive history: 1 archive snapshot, all within 2026 (1 year tracked, first and last seen 2026-09-01), classed as young and sparse.
• Homepage behavior: 3 of 3 sandbox runs succeeded with no console errors; about 50% of requests were external, none to non-whitelisted destinations.

Regulatory Verification Notes

The captured homepage discloses no company name, licence, registration number, or regulatory status, so the operator's real-world identity is not independently established. This is a verification gap and is not by itself evidence of wrongdoing. Given the activity implied by the branding, any financial or gaming-related function would normally require a named operator and an identifiable licensing authority. A broker-reputation database returned no match for the site, which is neutral context and not a regulatory finding. No third-party regulatory registration was identified. Evidence:

• Homepage: no legal entity name, licence, or registration identifier is shown.
• Identity checks: the site could not be independently linked to a named organisation or individual.
• Broker-reputation lookup: no match for this site name, which is context only.
• Transport encryption: a domain-validated TLS certificate issued by YR2, valid to 2026-12-13. This confirms encrypted transport only, not operator identity.

What to Verify Next

Before any engagement, the operator should be identified through an independent route, such as a named legal entity, a registered address, and a licence number checked directly with the relevant authority. Official contact and support channels should be confirmed through a source independent of this site. The domain's threat-intelligence status should be re-checked later to see whether the detections persist or are cleared. If the site is linked to a known organisation, that organisation should confirm through its own verified channels that it operates this domain. Evidence:

• Homepage: no named operator or licence to check against a registry.
• Domain registration: ownership sits behind a privacy service, so identity cannot be established from registration data.
• Reputation status: multiple current detections that should be re-checked over time.

Summary Verdict

The overall posture is high-risk. Confirmed threat-intelligence detections, combined with a very young domain and no verifiable operator, outweigh the technically sound but generic hygiene the site shows. The evidence supports treating the site as a hazard, not as an established entity with minor administrative gaps.

Infrastructure Integrity

The site is delivered through a mainstream content-delivery network (Fastly, AS54113, US), and all observed addresses are edge servers. The origin server was not visible, so hosting cannot be verified independently, and edge-only exposure can mask rapid content changes. The delivery network is shared across many tenants. A substantial number of abuse reports are attached to one of its edge addresses, which belongs to a shared GitHub-operated range. Those reports apply to the shared address and cannot be attributed to this site specifically. The infrastructure is a mitigating factor only and does not offset the reputation risk.

Closing Assessment

Interaction should be limited to passive viewing. Account creation, credential entry, wallet connection, and any payment or deposit should be avoided until the threat detections are cleared and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 38 reports on hosting IP 185.199.111.153 (GitHub, Inc., Content Delivery Network), 29% confidence. The reports are attributed to shared infrastructure, not specifically to this website.