Is fartboysolana.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

fartboysolana.com is a recently registered website whose name suggests a Solana-ecosystem, meme-token-themed project. When automated capture visited it, it did not return a normal homepage. It returned a security-gateway challenge page titled as a suspected-phishing warning, with only a very small amount of text. The site's own products, claims and business model could therefore not be read, and its apparent purpose cannot be confirmed from the site's content.

Scam/Impersonation Risk

The independent reputation evidence is decisively adverse. Multiple threat-intelligence engines, including a tier-one security vendor, classify the domain as malicious or suspicious, and it is blacklisted by external sources. The protective gateway in front of the site also replaced the homepage with a suspected-phishing interstitial, a second indication that the domain has been flagged for abuse. No brand impersonation and no conflicting legal identities were observed, so the risk rests on the reputation and abuse signals, not on any proven copying of a named organisation. The domain's short registration history and the token-themed name fit a pattern commonly used for rapidly launched promotional or wallet-solicitation sites. That pattern is an inference from the name and age, not an observed product or claim. Because the content was blocked, no specific yield, leverage or token claims could be assessed, and the absence of such claims in this report should not be read as reassurance. Evidence:

• Homepage capture returned an HTTP 403 bot-challenge page titled as a suspected-phishing warning, with roughly 392 characters of text.
• External reputation checks recorded 2 malicious and 3 suspicious detections, including one tier-one vendor, and a confirmed external blacklist hit.
• Domain registered 2026-04-30 (~0.5 years old on the registration record).
• 6 archive snapshots spanning 2025-01-29 to 2026-06-17 (2 years tracked). Captures before the current registration date indicate the name existed earlier, and the archive also carries a known-phishing flag.

Regulatory Verification Notes

No legal, terms, privacy, licensing or company-registration pages could be retrieved, so no regulatory status or legal entity can be attributed to the site. The registration record shows incomplete owner details, which is ownership opacity and not an identity contradiction. No third-party broker or regulatory-register match exists for the site, so there is no external reputational signal on licensing either way. Any financial or token-trading activity would need to be established from independent registries, not from the site. Evidence:

• Domain registered through NICENIC International Group Co., Limited, with the registrant details incomplete or hidden.
• Hosted on AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by YE1 (DV, domain validation only), valid to 2027-01-22, with 88 days remaining. A DV certificate confirms only control of the domain, not the operator's identity.
• No legal or disclosure pages were reachable in the captured content.

What to Verify Next

Before any engagement, check whether the flagged status has been cleared by re-querying the major threat-intelligence and browser-safety lists. Confirm independently whether any legitimate project is associated with this name, using official channels reached by a route not supplied by the site, such as an established project registry or directory. Any link to the domain received through social media, messaging or advertising should be treated as unsolicited. If the site claims to offer trading, staking or other financial services, verify the operator and any licence with the relevant financial regulator's register. Automated behaviour testing also showed heavy third-party traffic and unstable page rendering, so a cautious reviewer should confirm the site's real behaviour in an isolated environment. Evidence:

• Behavioural testing observed 105 external data requests and 9 external form submissions, with 23 console errors.
• 1,523 page-structure mutations followed interaction, which indicates dynamically injected content.
• No wallet-drainer behaviour, clipboard manipulation, hidden forms or fingerprinting was detected across 3 successful runs.
• The challenge page prevented a first-party review of the homepage, so no content-based verification was possible.

Summary Verdict

Available evidence supports a critical-risk posture. Confirmed external blacklisting and abuse flags are decisive. Neither the site's age nor its technical hygiene offsets them, and the operator's identity remains unestablished. No evidence of legitimacy exists that could balance these findings.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. Both observed addresses are edge nodes, and the origin server was not observable, so hosting cannot be independently verified. Bot protection and a valid TLS certificate are mitigating hygiene factors only. They are common to legitimate and malicious sites alike and cannot offset the adverse reputation findings.

Closing Assessment

The domain should not be used for login, credential entry, wallet connection or any payment or financial activity. Downloads from it should be avoided, and at most it should be viewed in an isolated, read-only manner. Anyone who has already interacted with it should treat that exposure as potentially compromised and change any reused passwords. Anyone who has connected a wallet to it should review and revoke its token approvals.