Is batonsol.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website batonsol.com is a single-page web property titled "Catecoin Distribution Dashboard". It presents itself as a dashboard for a token called Catecoin, which implies a claim-or-distribution interface for a crypto asset. The captured homepage carries very little text, and its apparent purpose is to steer visitors into a token distribution workflow. It publishes no named operator, product documentation or corporate context.

Scam/Impersonation Risk

This site carries confirmed, decisive contradictions. It currently appears on a blacklist, and several independent security sources rate the domain as malicious or suspicious. One recognised major security vendor flags it individually, so the detections are corroborated and not an isolated outlier. No brand impersonation and no conflicting legal identities were observed, and the page text offers no named entity to contradict. The risk therefore rests on the reputation findings and on the profile of a freshly registered domain that fronts a token "distribution" theme. That theme is a pattern commonly used to lure visitors into token-claim or wallet-interaction flows. Sandbox testing observed no wallet-connection prompts, no drainer behaviour, no clipboard manipulation and no cloaking. This does not offset the blacklist, because those checks cover only what ran during the sandbox sessions. The homepage did send several data submissions to external third-party destinations outside the site's own known infrastructure, and a large share of its network activity went to external hosts. That is an unexplained data-flow pattern on a page that offers a distribution dashboard. The page also produced repeated script errors during loading, which is consistent with an unpolished or hastily assembled front end. Evidence:

• Homepage reputation: the domain is on a confirmed blacklist. An aggregated multi-engine scan rated it malicious in six engines and suspicious in two, and one major security vendor independently flags it.
• Domain provenance: the current registration dates from 2026-09-10 (~0.12 years old) and expires 2027-09-10, through registrar NICENIC INTERNATIONAL GROUP CO., LIMITED. The registrant details are incomplete.
• Archive depth: 9 archive snapshots span 2024-01 to 2026-09 (3 years tracked), so the archive is sparse and the page has little verifiable history.
• Homepage behaviour: three data submissions went to external, non-allow-listed destinations, with up to roughly 82% of network activity external, and nine console errors were logged.

Regulatory Verification Notes

The site names no operating company, publishes no legal or terms pages that identify an entity, and cites no licence or registration. Independent analysis could not tie it to a real-world brand or person, so its identity remains unverified. The domain's ownership is opaque, with incomplete registrant details. That is an ownership-opacity factor, not an identity contradiction. A token distribution interface handles assets that regulators in many jurisdictions treat as financial products. The absence of any disclosed issuer, terms or licensing context is therefore material here, though on its own it is a verification gap and not proof of wrongdoing. No third-party broker or regulatory-database match exists for this site, so no external regulatory standing can be inferred in either direction. Evidence:

• Homepage: the page presents a token distribution dashboard but states no operator, jurisdiction, licence or registration number.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by WE1 at domain-validation (DV) level and is valid to 2026-12-09, about 47 days from now. DV validates control of the domain only and does not vouch for the operator's identity.
• No third-party broker or regulator record matches this domain.

What to Verify Next

Any verification should start from channels the site itself does not control. Before any interaction, confirm independently that a Catecoin project and a genuine distribution programme exist. Use the project's announcements on established, separately sourced channels, not links or contact details found on this domain. Check with the issuer or an official registry whether the operator is authorised to run token distribution. Ask the registrar whether the domain has changed hands or been re-registered recently, since the current registration is new and the archive shows earlier captures. Confirm any official support route through an independent, offline channel. Evidence:

• Homepage: the dashboard names no issuer, so the claimed distribution programme cannot be checked from the site itself.
• Registration record: the current registration began on 2026-09-10, while archive captures date back to 2024-01, so continuity of control is unclear.
• Reputation findings: the blacklist status should be checked again with the listing sources before the site is treated as safe.

Summary Verdict

Available evidence supports an elevated-risk, clearly cautionary posture for this website. Active blacklisting and corroborated malicious ratings are decisive and outweigh the technically sound but low-assurance encryption and the continuous archive presence. Legitimacy and operator identity are unverified, and nothing in the evidence establishes a reliable basis for trust.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server is not observable, so the hosting cannot be independently verified. This protection is a mitigating factor only. It does not offset the reputation findings, and it can obscure rapid changes to the content behind the edge. The domain is young with sparse subdomain structure, which fits a lightweight, recently stood-up deployment.

Closing Assessment

The site should be treated as read-only at most. Visitors should not log in, enter credentials, connect a wallet, sign transactions or make any financial transfer through it. Any download from it should be avoided. Anyone who has already interacted with it should review and revoke token approvals and change reused passwords.