Is fortunephantomai.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Fortune Phantom is a recently launched, Spanish-language website that titles itself "Fortune Phantom — Sitio oficial en Chile 2026" and presents itself to visitors as the official Chilean site of a brand with an AI-themed name. A single-page homepage capture shows substantial text content. The site's business model and real-world operator could not be independently established, and the official-site claim has not been corroborated.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Several independent security engines currently flag the domain as malicious, with others marking it suspicious, and the domain also appears on external blacklists. A site this new that is already blacklisted by multiple sources is a serious warning. The homepage's claim to be the "official site in Chile" adds weight, because that kind of branding is often used to make a fresh domain look authoritative. No conflicting legal entities were observed, and no specific brand impersonation was confirmed. Behavioral testing across several runs found no wallet-drainer activity, clipboard manipulation, hidden forms, or content cloaking, and all outbound requests went to recognized destinations. These findings do not offset the blacklist evidence. Site behavior can change quickly, and the reputation listings reflect how the domain has been used or reported. Evidence:

• Homepage: the page title asserts "official site in Chile 2026" for a domain registered in March 2026 (about 0.63 years old, created 2026-03-10).
• Web archive: only 3 snapshots, spanning 2026-09-11 to 2026-09-22 (1 year tracked), so there is no long operating history behind the "official" claim.
• Reputation checks: multiple engines report the domain as malicious or suspicious, and it appears on external blacklists.
• Behavioral testing: 3 of 3 runs completed with no wallet-drainer, clipboard-hijack, hidden-form, or cloaking behavior.

Regulatory Verification Notes

The captured homepage does not allow a licensed or registered operating entity to be identified, and the on-page disclosure position is unclear. No third-party regulatory or broker record matched this site, so no regulatory standing can be inferred in either direction. Operator identity remains unverified, and the ownership details behind the domain are not established. This is a verification gap in its own right, and it matters more because the contradictory reputation signals are already present. The technical hygiene visible here is routine and does not establish legitimacy: a valid but entry-level TLS certificate, and registration through a commercial registrar. Evidence:

• Registration: domain registered through Sav.com, LLC, created 2026-03-10 and expiring 2027-03-10.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-03 with 38 days remaining.
• Homepage: no regulator, license, or registered-company disclosure could be established from the captured content.

What to Verify Next

Before any engagement, the site's claim to be an official Chilean presence should be tested against the brand or company it implies, using that organization's independently known website or contact channels rather than anything reached through this domain. Any business, license, or registration number the operator provides should be checked with the relevant Chilean registry or regulator. The official support channels should be confirmed through an independent, offline route. The domain's reputation status should also be rechecked, since third-party listings change and a cleaned-up site would show a different picture. Until the site is independently confirmed, it should not be used for login, credential entry, or any payment. Evidence:

• Homepage: the Spanish-language "official site in Chile" title is the only identity claim available to test.
• Homepage: the captured content does not name an accountable operator or registration that can be checked directly.
• Third-party listings: the current malicious and suspicious flags provide a concrete baseline against which any later re-evaluation can be compared.

Summary Verdict

The overall posture is high-risk. Current threat-intelligence listings are decisive, and the domain's youth and unestablished operator identity leave nothing to offset them. Technical hygiene signals are present but carry little weight against the adverse reputation evidence, so legitimacy cannot be inferred.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF, and all observed addresses are edge servers, so the origin host was not observable. This is a mitigating factor only: the valid certificate and mainstream edge provider reduce basic exposure, but edge-only visibility prevents independent hosting verification and can mask rapid content changes. Infrastructure protection does not offset the reputation risk.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Account creation, login, credential entry, wallet connection, and financial transactions should be avoided entirely. Any viewing should be passive and read-only, from a device and browser profile that holds no sensitive data, and nothing should be downloaded. Anyone who has already shared credentials or funds with this domain should change the affected passwords and contact their bank or payment provider promptly.