Is fomies.xyz safe? TrustSniffer's low-trust assessment: 29/100

Overview

Fomies is a single-page NFT mint and airdrop-waitlist site for a "Fomies Family" digital-collectible project. It uses a tongue-in-cheek "Department of FOMO" bureaucratic theme, and the page shows the project as established in 2026. Visitors are invited to enter the "department", flip and share collectible cards, mint Fomies NFTs and join an airdrop waitlist. The apparent business model is revenue from paid mint sales, backed by community sign-ups. The page itself disclaims any profit, resale value, liquidity or delivery of future benefits.

Scam/Impersonation Risk

Hard contradictory evidence is present. The domain is currently flagged by external reputation sources, and this blacklist-type listing is the decisive negative signal. It is not offset by the protective hosting or the site's clean behaviour. In sandbox testing the page made no external network calls, showed no cloaking and had no login or credential forms, so no active credential harvesting was observed. No brand impersonation and no conflicting legal identities were detected. The risk therefore comes from the blacklist listing combined with the nature of the offer. The page asks for payment in a mint but publishes no contract address, no mint price, no named team and no legal entity. Its candid disclaimers ("you can lose some or all of the money you spend", no promise of resale value or liquidity) do not substitute for that proof. The playful tone and the lengthy risk language make the offer feel transparent, yet the user is left to find the correct contract independently. That is a recognised weakness for new NFT projects, because look-alike mint pages and spoofed contracts are common in this category. The public page also exposes staging test controls, namely an "Application state Open/Closed" toggle and an "Exit test mode" control. These suggest an unfinished or hastily deployed build rather than a hardened production launch. Evidence:

• Homepage: a paid NFT mint is offered with no verifiable contract address, mint price or team identity, and the page discloses no resale value or delivery commitment.
• Homepage: staging test controls ("Application state Open/Closed", "Exit test mode") are visible to every visitor.
• Domain registered 2026-10-05 (~14 days old, 0.04 years).
• Web archive shows only 2 snapshots, both from 2026-10-05, covering 1 year of tracking, so there is no meaningful track record.

Regulatory Verification Notes

The page makes no claim of licensing or regulatory registration and names no legal entity, operator or jurisdiction. Digital collectibles are not licensed in the way financial products are, but a paid mint without a stated seller leaves buyers with no identifiable counterparty. The contact details are themed rather than usable. A fictional "555-FOMO" extension, a "basement level, corridor B" office and "the building, no fixed address" stand in for a phone number and address, and opening hours are given as "when open" and "allegedly". Only social handles and a generic intake mailbox provide any real channel. This is a verification gap and not proof of fraud on its own. No third-party broker or regulatory-warning dataset matched the site, so the elevated posture rests on the reputation listing and the page-level findings rather than on any regulatory finding. Evidence:

• Homepage: no licence, registration number, legal entity name or physical address is stated.
• Homepage: the contact block uses a fictional phone extension and a "no fixed address" location.
• Hosting ASN AS13335 (Cloudflare, Inc., US); registrar PDR Ltd. d/b/a PublicDomainRegistry.com.
• The site's TLS certificate is issued by YE1 (DV, domain-validated only) and is valid to 2027-01-03, which proves control of the domain but not the operator's identity.

What to Verify Next

Before any wallet interaction, the contract address should be obtained from a channel independent of this site, such as the project's verified social accounts. It should then be checked on a public block explorer for deployer history, source-code verification and mint functions. The two social handles shown on the page should be confirmed as genuinely linked from an established, independently reachable presence, and the stated mint price should be confirmed there. The team or legal operator should be identified through an independent route, and the official support channels should be confirmed before any payment or wallet signature. Finally, the reputation listing should be rechecked after the site owner has had time to respond or remediate. Evidence:

• Homepage: no contract address or mint price is published, so independent sourcing is required.
• Homepage: two social handles are listed but the page contains no outbound links to confirm them.
• Homepage: the staging controls indicate the live build may still change before or after launch.

Summary Verdict

The assessment is elevated risk. A reputation listing, a very young domain with no track record and a paid crypto offer with no verifiable counterparty converge on a cautious, security-forward conclusion. Technically clean behaviour and a valid certificate are mitigating context but do not outweigh the listing. The identity of the operator is unverified.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF, and every observed address is an edge node, so the origin server cannot be seen or independently assessed. The certificate is valid and issued by a known authority. This is a mitigating factor only. Edge-only visibility also makes it harder to detect rapid content swaps, and protective infrastructure does not offset the reputation listing.

Closing Assessment

At most, the site should be viewed read-only. No wallet connection, mint payment, credential entry or other financial interaction is advisable unless the independent checks above are satisfied and the external listing is cleared.