Is rowdies-robinhood.web.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Rowdies NFT is a single-page promotional site for a 5,555-piece, hand-drawn character collection ("Rowdies") marketed as a free mint on Robinhood Chain. It uses a "Get a Spot" whitelist application to funnel visitors into wallet verification and a Discord role. The apparent business model is a new Web3 community project that distributes the collection for free and builds on a planned native token with staking rewards.

Scam/Impersonation Risk

Contradictory signals are present, and the site warrants a clearly cautionary reading. Multiple major security vendors currently flag the domain as malicious, including two top-tier vendors, and a confirmed blacklisting is on record. No brand impersonation, phishing form, or conflicting legal identities were detected, so the risk rests on the external threat detections and the nature of the offer. The homepage promises that each Rowdie can be staked to "passively earn $RWD", described as spendable currency inside a future Rowdies marketplace. It also describes a path to "governance" and "cross-community rewards". Allocations are stated as 55 for the team, 4,000 guaranteed whitelist spots, and 1,500 first-come-first-served. The page gives no contract address, audit, token supply, team identity, or explanation of how value flows to the team. Passive-yield promises tied to an unreleased token, combined with a wallet-verification gate before participation, are a pattern commonly used to harvest wallet addresses and community trust. The sandbox did not observe wallet-drainer behaviour, clipboard hijacking, or credential forms. That observation does not offset the external detections, because a wallet interaction could be changed after analysis. Four abuse reports exist against a Google-operated content-delivery IP address that serves this site. These attach to shared provider infrastructure, not to the site's own operator, and are treated as background context. Evidence:

• Homepage: free mint of 5,555 pieces, with a wallet-verification gate described as required to "secure your spot" and receive a whitelist role in Discord.
• Homepage FAQ: staking of each Rowdie to passively earn the native $RWD token, with no token supply, contract, or audit disclosed.
• Domain provenance: registered about 22 days before analysis (a newly created domain), with 1 archive snapshot, first and last seen 2026-09-29 (1 year tracked).
• Threat intelligence: 9 malicious and 1 suspicious verdicts from security engines, including 2 top-tier vendors, plus 4 abuse reports on the shared edge IP 2620:0:890::100.

Regulatory Verification Notes

The site publishes no legal entity, registered address, licence, or registration number, and no contact channel that could be checked independently. The domain's ownership is also opaque. The site is a subdomain of a free application-hosting platform instead of a standalone branded domain, so the domain gives no independent indication of who is behind the project. No third-party broker or regulatory record matched this site. Even so, the absence of on-site disclosure means the operator's real-world identity remains unverified, and none of the project's claims can be tied to an accountable party. For a project that invites token-linked participation, no entity can be held to the staking, governance, or marketplace promises. Evidence:

• Homepage and FAQ: no company name, jurisdiction, licence, terms page, or privacy page was found.
• Hosting: served from AS54113 (Fastly, Inc., US), with no hosting detail that identifies the project operator.
• Transport encryption: TLS certificate issued by WR4 (domain-validated only), valid to 2026-12-22, which confirms encryption but not operator identity.

What to Verify Next

Any verification should start from the project's real-world identity, because the page offers none. Prospective participants should look for an independently confirmable team, a published smart-contract address that matches the one on the Robinhood Chain explorer, and a security audit. The official project announcements should be confirmed through channels reached independently of this page, and the collection's presence on the OpenSea launchpad it references should be checked directly on that marketplace. The site's own links should not be used for this. Official support and contact channels should likewise be confirmed offline. Any claim of passive $RWD earnings should be treated as unsubstantiated until token supply, distribution, and contract terms are publicly documented. Evidence:

• Homepage: the OpenSea launchpad and Robinhood Chain claims are unsupported by any contract address or outbound link.
• Homepage: the stated allocations (55 team, 4,000 whitelist, 1,500 public) cannot be matched against any on-chain record from the page.
• Whitelist form: the single whitelist application form gives no stated data-handling terms or operator identity.

Summary Verdict

The assessment is elevated risk. Active external threat detections combine with an unverifiable operator, a very new domain, and a token-yield narrative with no supporting disclosure. The site's protective technical posture and clean sandbox behaviour are insufficient to outweigh these factors. Its legitimacy cannot be established on the available evidence.

Infrastructure Integrity

The site is delivered through the Fastly content-delivery network, and all observed addresses are edge nodes. The origin server was not observable, so the true hosting location cannot be confirmed independently. This edge-only visibility can also mask rapid content swaps. The CDN and a valid certificate are mitigating factors only and do not offset the reputation risk.

Closing Assessment

The site should be treated as read-only at most. Wallet connections, whitelist submissions, Discord role claims, and any token or NFT transactions should be avoided until independent evidence of a legitimate, identifiable operator emerges and the external threat detections are cleared. Any wallet already connected should have its approvals reviewed and revoked.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.