Is the-robo.web.app safe? TrustSniffer's low-trust assessment: 36/100

Overview

The-robo.web.app is a single-page promotional site for "THE ROBO NFT Collection", which advertises 3,333 hand-drawn robot artworks. Its captured homepage carries only a short block of text. It appears to be a digital-collectible launch or showcase page, and its apparent business model is selling or promoting NFT artwork to retail buyers.

Scam/Impersonation Risk

Contradictory signals are present, and this section is the main reason for the cautionary posture. The domain appears on an external blacklist: one security engine rates it malicious and another rates it suspicious. This is a confirmed adverse reputational hit, not a mere broker opinion. It is compounded by the site's extreme youth. The domain was created only weeks before the assessment, and its web-archive footprint is thin. A page selling a numbered NFT collection on a freshly created domain, with a blacklist hit, matches a recognisable pattern for short-lived collectible promotions, so the combination warrants treating the site as elevated risk. Four abuse reports exist against one of the site's edge addresses. These relate to shared provider infrastructure and carry a very low confidence rating, so they are weak corroboration and not an accusation against the site itself. Behavioural testing did not reinforce the blacklist hit. Across three sandbox runs, the page returned stable responses and showed no wallet-connection prompts, clipboard tampering, hidden forms, cloaking, or credential posts to external destinations. Its background traffic to third-party services was heavy but went entirely to recognised destinations. No brand impersonation or conflicting legal identities were observed. These observations narrow the threat picture but do not offset the blacklist hit. Evidence:

• Homepage domain: one security engine flags it as malicious and one as suspicious, producing an external blacklist match.
• Domain is about 47 days old (~0.13 years).
• Web archive holds only 3 snapshots, spanning 2026-09-08 to 2026-09-22 (1 year tracked).
• Sandbox runs on the homepage: 3 of 3 successful, 0 console errors, 0 wallet-connect or drainer behaviours, and 0 external form posts of passwords.

Regulatory Verification Notes

The site is not shown to be regulated or registered anywhere. The homepage text gives no clear indication of who operates the collection or under what legal entity. Real-world operator identity therefore remains unestablished, and on-site claims cannot be treated as proof of legitimacy. For an NFT sales page, the lack of a named issuer, terms or a stated jurisdiction matters most. Buyers would have no obvious route to recourse. This is a verification gap and not evidence of wrongdoing by itself. In this case it adds weight to the separate blacklist hit. No third-party broker record matched the site. The technical transport layer is sound, but this shows only baseline hygiene and says nothing about the operator. Evidence:

• Homepage: the captured text identifies no operating entity, licence, registration number or jurisdiction.
• Served from AS54113 (Fastly, Inc., US).
• TLS certificate issued by WR4 (DV, domain-validated only), valid to 2026-12-22, with 57 days remaining.

What to Verify Next

Before any engagement, the operator behind the collection should be identified through independent, off-site sources, such as a named team with a verifiable track record. Any claimed mint or smart contract should be matched against a public blockchain explorer and a recognised marketplace listing, not against links on this page. Official social accounts and support channels should be confirmed through an offline or independent route. The blacklist status should be rechecked later, because a listing on a very young domain may change. A site owner that was compromised and then cleaned would be delisted. A listing that persists would reinforce the concern. Evidence:

• Homepage title advertises a 3,333-piece hand-drawn collection, but the captured text does not establish who issues it.
• The domain's youth and thin archive history leave no long-run track record to rely on.
• The external blacklist hit on the homepage domain is current and unresolved.

Summary Verdict

The available evidence supports an elevated-risk assessment. A confirmed external blacklist hit on a very new domain outweighs the site's sound technical hygiene and clean behavioural testing. Apparent legitimacy cannot be concluded, and real-world identity is unverified. The site should be treated as unsafe for sensitive or financial interactions.

Infrastructure Integrity

The site is delivered through Fastly, a mainstream CDN and WAF, and both observed addresses are edge servers. The origin host was not observable, so hosting cannot be independently verified through this layer. The CDN provides a valid, properly issued TLS channel and mitigates some exposure, but it is protective infrastructure only. It does not vouch for the content or operator, and it cannot offset the reputation risk.

Closing Assessment

The site should be treated as read-only. No wallet should be connected, no credentials entered, and no payment or minting transaction made through it until the operator is independently identified and the blacklist status is cleared.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.