Is fone-meme.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a minimal single-page promotion for a token called "$Fone". Its banner announces that an "allocation is live". It carries almost no descriptive text beyond that headline, with no product explanation, team, or documentation. Its apparent purpose is to drive visitors toward claiming or acquiring a meme-token allocation, which is a common pattern for short-lived token-launch promotions.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Multiple independent threat-intelligence sources currently flag the domain as malicious or suspicious, which amounts to a confirmed blacklisting. The site is also very young and has an extremely thin archival footprint. That combination is typical of throwaway domains stood up to run a promotion and then abandoned. The "allocation is live" headline creates urgency without explaining who is making the offer, what is being allocated, or on what terms. During behavioral testing, the homepage sent several data submissions to third-party destinations outside the site's own and commonly trusted services. A meaningful share of its total requests also went to external hosts. For a page with almost no visible content, this outbound activity is disproportionate and its purpose is unexplained. No wallet-drainer behavior, clipboard manipulation, hidden forms, or page cloaking was observed in testing. This keeps the assessment grounded in reputation and context rather than a demonstrated exploit. No conflicting legal identities were found. That is because the site names no entity at all, not because an identity was confirmed. Evidence:

• Homepage: the title and headline promote "$Fone — allocation is live" and the page carries only a very short passage of text.
• Domain provenance: registered 2026-08-29 (~0.16 years old, about 57 days).
• Web-archive depth: 3 snapshots, first seen 2026-09-05 and last seen 2026-09-21 (1 year tracked).
• Homepage behavior: 3 non-whitelisted external POST requests and 6 external XHR/fetch calls across 3 test runs, with external traffic reaching roughly 54% in the peak run.

Regulatory Verification Notes

The homepage names no operating company, jurisdiction, licence, or registration number. No terms, privacy, or legal pages were captured. Beyond the token branding, nothing connects the site to a real-world person or organisation. Ownership is opaque, and the registration record is incomplete. For a site inviting people to claim a token allocation, the absence of any disclosure means nothing can be checked against a registry. No third-party broker or regulatory-database entry was matched for this site. No regulated status can be assumed, and the reputational warnings above stand on their own. Evidence:

• Homepage: no legal entity, address, licence, or registration identifier is published.
• Domain registration: registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED, with expiry 2027-08-29.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-11-27 with 32 days remaining. DV confirms control of the domain, not the identity of the operator.

What to Verify Next

Before any engagement, an independent party should establish who is behind the "$Fone" allocation. The operator's identity should be confirmed through channels that do not originate on this site. Any claim of an official token should be checked against the project's announcements from a source established before this domain existed. A token contract address offered by the site should be checked on a public block explorer. The check should cover deployment date, holder concentration, and liquidity lock status. The site's official social and support channels should also be confirmed offline or through an independent route. Re-testing the domain against threat-intelligence sources is advisable to see whether the current listings persist. Evidence:

• Homepage: the "allocation" offer lacks any stated eligibility, terms, or token identifier that could be traced.
• Domain age: the roughly two-month-old registration offers no prior history to corroborate a long-running project.
• Reputation: current malicious and suspicious flags remain unresolved.

Summary Verdict

The overall posture is high-risk. Confirmed blacklisting by multiple sources, a very new domain, and an anonymous operator point the same way. Valid transport encryption and stable page delivery are technical hygiene only and do not offset the reputational findings. The site does not support a trusting assessment, and the evidence calls for a clearly cautionary stance toward any sensitive interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed IP address is an edge address. The true origin server was not observable. This shields the site from direct attack and gives it a reputable hosting footprint, which is a mitigating factor only. It does not indicate legitimacy. Edge-only visibility also prevents independent verification of where the content is actually hosted. It lets content be swapped quickly without any visible change to network identifiers. Automated heuristics noted a young domain with sparse subdomains, but this is unconfirmed and carries no independent weight.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected, no credentials or personal details entered, and no funds or tokens committed. Users who have already interacted with it should review wallet approvals and revoke any that were granted.