Is fomochart.fun safe? TrustSniffer's low-trust assessment: 25/100

Overview

The website at fomochart.fun could not be viewed directly. On capture, visitors were shown only a security warning interstitial stating that the site "has been reported for potential phishing", with a prominent "Ignore & Proceed" option. No products, pricing, branding, legal pages or business model were visible, so the site's real purpose and operator cannot be established. It is a newly registered domain whose only observable content is that reputational warning.

Scam/Impersonation Risk

This is the decisive section of the assessment. Independent threat-intelligence sources currently carry a confirmed blacklist listing for this domain. Several detection engines flag it as malicious and others as suspicious, and the phishing report is what triggered the interstitial. No brand impersonation was detected on the captured page, and no conflicting legal entities were observed. That is only because no underlying content was reachable, so these signals do not offset the blacklist. The warning page's "Ignore & Proceed" option exposes anyone who bypasses it to whatever the site serves behind the interstitial. The domain was also registered only weeks before capture, a pattern typical of short-lived phishing infrastructure. Operator details are incomplete (ownership opacity), which prevents any independent link between this domain and a real-world person or business. Credential entry, login and any financial interaction are unsafe. The captured page itself is not a phishing form: it contained no login form, hidden form or credential-capture element. Evidence:

• Homepage capture: a security warning interstitial states the site "has been reported for potential phishing", with an "Ignore & Proceed" bypass button.
• External reputation: 3 malicious and 2 suspicious verdicts from threat-intelligence engines, alongside a confirmed external blacklist listing.
• Domain registered 2026-09-20 (~0.08 years, about 30 days old) through the registrar Dynadot Inc, with owner details incomplete.
• Web archive: 5 snapshots, all in 2026 (1 year tracked), first seen 2026-09-20 and last seen 2026-10-06, so there is no established history.

Regulatory Verification Notes

No legal, terms, privacy, about or contact pages could be assessed, because only the warning interstitial was captured. No licence, registration number or regulator was claimed or observed, and no third-party broker database match exists for this name. This is therefore not a finding of regulatory non-compliance. It does mean there is no evidence of any authorised or regulated status that could balance the threat listing. The operator's identity remains unverified and cannot be inferred from the available material. Because the site could not be viewed, any financial-services, trading or investment claim it might make behind the warning should be treated as entirely unsubstantiated. Evidence:

• Captured page: contains no legal entity name, licence claim, registration number or regulator reference.
• Hosting network: AS13335 (Cloudflare, Inc., US), country US.
• Transport encryption: TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-19. This confirms only that the connection is encrypted, not who operates the site.
• No match was found in the third-party broker reputation dataset.

What to Verify Next

The warning should not be bypassed with a personal or corporate account. If a link to this domain was received through an email, message, advertisement or social post, the sender should be contacted through a separately known channel to confirm they actually sent it. Any organisation claimed to be behind the site should be identified through its official, independently sourced website or a regulator's public register. Nothing should be inferred from the site's own wording. The domain should be re-assessed only after the threat listings have been removed or the registered operator has been established. If the site is encountered inside an organisation, the security team should be notified and the domain blocked at the perimeter. Evidence:

• Homepage capture: the only offered action is to ignore the warning and proceed, and no operator or contact information is shown.
• Capture status: access was blocked with an HTTP 403 and a bot challenge, so the underlying pages are unreviewed.
• Captured page: zero forms and no login element were present, so no data-collection flow was observed.

Summary Verdict

The available evidence supports a clearly high-risk posture. Multiple independent threat sources flag the domain, and a confirmed blacklist listing exists. The domain is very new and its operator is unidentified. Nothing observable provides legitimacy evidence strong enough to counter these signals. The domain's technical hygiene is basic, and does not reduce the reputational risk.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge address. The real origin server was not observable. A valid domain-validated TLS certificate is also in place. This is a mitigating factor only, and it does not offset the external threat detections. Edge-only visibility prevents independent verification of where the site's content is actually hosted, and the protective layer cannot vouch for the operator or the content behind it.

Closing Assessment

Treat the domain as unsafe for any login, credential entry, payment or wallet interaction. Do not bypass the browser's security warning, and do not download anything from it. Where possible, the link should be reported to the organisation's security team or the relevant anti-phishing reporting channel.