--- title: "Is theinkies.fun a Scam? Trust Score 18/100" source: TrustSniffer type: Website trust & fraud report subject: "theinkies.fun" verdict: "Critical Risk" title: "Is theinkies.fun a Scam? Risk Report, Score 18/100" trust_score: 18 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/theinkies.fun assessed: 2026-10-26 --- # Is theinkies.fun a scam? TrustSniffer's high-risk assessment: 18/100 ## Verdict **Verdict: Critical Risk, trust score 18/100.** theinkies.fun shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-26 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 2 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 2 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (2 snapshots) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the theinkies.fun homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/theinkies.fun/screenshots/first.png) _What theinkies.fun served when TrustSniffer captured it on 2026-10-26. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview INKIES is a newly launched, single-page website promoting an onchain NFT collection. Its page title advertises "4,096 manga faces, fully onchain", and the homepage carries only a short block of promotional copy. The apparent business model is the sale or minting of a fixed-supply collectible set of 4,096 generative manga-style avatars, which is a speculative digital-asset proposition. ### Scam/Impersonation Risk The site carries **confirmed adverse reputation signals**. Multiple independent security engines classify the domain as malicious, and a further engine rates it suspicious. A separate external blacklist also lists it, so the domain is blacklisted by more than one source. No brand impersonation, conflicting legal identities, or phishing-page behaviour were identified in the captured content, and the identity and impersonation checks produced no additional contradictions. The blacklisting is nonetheless decisive. The domain is only weeks old and has a thin history, and collection-style onchain "mint" sites are a common vehicle for wallet-drain and rug-pull campaigns. The site's central claim, that the collection is "fully onchain", is an unverifiable marketing assertion on the homepage. The collection is not recognised in DeFi protocol directories, so nothing independent supports the project's legitimacy. In the sandbox, the homepage showed no wallet-connection prompts, no wallet-draining routines, no clipboard manipulation, no hidden forms, no cloaking, and no outbound data submissions to unapproved third parties. This is a mitigating observation about the captured visit only. It does not offset the blacklisting, because a malicious mint flow can be activated or swapped in after a page is first captured. Evidence: - The security-engine consensus on the domain is two malicious verdicts and one suspicious verdict, supported by a corroborating external blacklist entry. - The homepage title and copy advertise "4,096 manga faces, fully onchain", with no verifiable project, team, or contract detail in the captured text. - The behavioural sandbox ran 3 successful visits to the homepage and recorded no wallet-provider detection, no drainer activity, no clipboard writes, and no cloaking. - The domain was registered on 2026-08-25 (~0.17 years old), so it has had very little time to build an independent track record. ### Regulatory Verification Notes The captured homepage presents no licensing, registration, or corporate-identity information. Because the offering is a digital-collectible sale, the absence of any legal entity name, terms, or jurisdictional disclosure leaves the operator unidentified. Such a gap is a verification matter in its own right, but here it compounds the reputational concerns rather than standing alone. No third-party broker or regulatory-database match exists for the domain. The site's real-world operator has not been independently established, so no claim of legitimacy can be drawn from on-site statements. The domain's registration is held behind a privacy proxy, which is treated as an administrative detail rather than an independent finding. Evidence: - The homepage, the only page captured, lists no company name, licence, registration number, or terms of sale. - Registered 2026-08-25 through GoDaddy.com, LLC, with registrant details held by Domains By Proxy, LLC; the registration runs to 2027-08-25. - Served from AS13335 (Cloudflare, Inc., US); the TLS certificate is a domain-validated (DV) certificate issued by WE1, valid to 2027-01-21. DV certificates confirm domain control only, not operator identity. - The web archive holds 2 snapshots spanning 2026-09-02 to 2026-10-12, which is a very shallow history of about one year tracked. ### What to Verify Next Any engagement should start from the position that the project is unproven. Before any interaction, a prospective participant should find out who is behind the collection, using channels independent of the site. These include a named team with a verifiable history and an official social presence that the project's own announcements link back to. Any smart-contract address the project cites should be checked on a public block explorer. The check should cover its deployment date, its verified source code, its holder distribution, and whether the supply matches the advertised 4,096. Participants should also confirm the official support and contact channels offline. Finally, the blacklist status should be re-checked with the listing sources before any decision is revisited. Evidence: - The advertised fixed supply of 4,096 items can be checked directly against onchain records. - The homepage names no team, company, or contract address that could be cross-referenced. - The domain's registration is about two months old, so independent third-party coverage should be treated as absent until it is demonstrated. ### Summary Verdict The site presents an elevated-risk posture. Convergent adverse reputation from several independent sources, combined with a very young domain and an unidentified operator, outweighs the technically clean behaviour seen during the capture. The available evidence does not support treating the site as trustworthy for any sensitive or financial interaction. ### Infrastructure Integrity The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge address, so the origin host is not visible. Its transport encryption is valid, with a certificate from a known issuer and ample remaining validity. This is a mitigating factor only. Protective infrastructure is available to any operator, legitimate or not, and edge-only visibility prevents independent verification of the hosting and can mask rapid content swaps. It cannot offset the reputational risk. ### Closing Assessment The site should be treated as read-only at most. No wallet should be connected, no transaction or signature approved, no mint or purchase attempted, and no credentials or personal data entered. Anyone who has already interacted with it should review and revoke token approvals on the wallet involved and move any exposed assets. _Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) - The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`) ### 03 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 04 Registration and ownership - The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`) - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check. (Registration and ownership `rule:KF_WHOIS_PRIVATE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 15% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of theinkies.fun. - The request stayed on theinkies.fun. It was not redirected to another domain. (Clear) - Registration is published under GoDaddy.com, LLC. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-08-25. (Noted) - The earliest public archive of this site is from 2026-09-02. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | GoDaddy.com, LLC | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3037::6815:1ad4 | | Name servers | jaziel.ns.cloudflare.com, kia.ns.cloudflare.com | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2027-01-21 | | Domain age | 0.17 years (continuous registration) | | Domain expiry | 2027-08-25 | | Archive first seen | 2026-09-02 | | Archive snapshots | 2 | | Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about theinkies.fun at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [pump-gostream.fun](https://trustsniffer.com/report/pump-gostream.fun), another .fun site assessed as critical-risk (Critical Risk, 24/100) - [embercurves.fun](https://trustsniffer.com/report/embercurves.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [pool2.fun](https://trustsniffer.com/report/pool2.fun), another .fun site assessed as critical-risk (Critical Risk, 24/100) - [greenmorning.fun](https://trustsniffer.com/report/greenmorning.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [pump-streamfor.fun](https://trustsniffer.com/report/pump-streamfor.fun), another .fun site assessed as critical-risk (Critical Risk, 16/100) - [pump-coin-live.fun](https://trustsniffer.com/report/pump-coin-live.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [bitvavo.fun](https://trustsniffer.com/report/bitvavo.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [pumpclick.fun](https://trustsniffer.com/report/pumpclick.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [vote-spectrafinance.app](https://trustsniffer.com/report/vote-spectrafinance.app), another site assessed as critical-risk (Critical Risk, 5/100) - [azxzzzzzzzz.netlify.app](https://trustsniffer.com/report/azxzzzzzzzz.netlify.app), another site assessed as critical-risk (Critical Risk, 5/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) - [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen) - [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance) --- *Source: [TrustSniffer](https://trustsniffer.com/report/theinkies.fun) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/theinkies.fun · assessed 2026-10-26.*