Is catamoto-cats.pages.dev safe? TrustSniffer's low-trust assessment: 40/100

Overview

This is a single-page website served from a shared platform subdomain. Its title presents a token-style brand with a ticker-like "$" label, and it carries a substantial block of homepage text. The apparent purpose is to promote a crypto-token or community-branded project to visitors.

Scam/Impersonation Risk

This is the decisive area of concern. Several independent threat-intelligence sources currently flag the site as malicious, and others mark it as suspicious. The site therefore appears on confirmed blacklist sources, and this outweighs every protective or neutral technical attribute observed. The page was captured and loaded normally. The behavioural sandbox found no wallet-connection prompts, clipboard manipulation, hidden forms, credential forms posting off-site or cloaking. This shows that the flagged status was not reproduced as an overt in-session attack. It does not clear the site. The homepage generates unusually heavy outbound traffic to third-party endpoints, with almost all of its network activity directed outside the site's own origin. That is a poor fit for a simple brochure-style token page and leaves a large unexplained third-party data flow. The homepage also produced repeated script errors during loading. The wider reputation record also associates the domain with phishing-related listings. No conflicting legal identities and no confirmed brand impersonation were observed, so the concern rests on the reputation and traffic evidence rather than on identity contradictions. Token-themed pages on disposable platform subdomains are a common vehicle for lures and wallet-draining campaigns. The reputation listings give that pattern particular weight here. Evidence:

• Homepage and reputation record: multiple engines rate the site malicious (two) and suspicious (two), which is the basis for the blacklist finding.
• Homepage network behaviour across three sandbox runs: 78 external XHR/fetch requests and 12 external POST requests, with up to 97.8% of activity directed externally and 11 console errors. Only 3 requests went to non-whitelisted destinations, and no wallet, clipboard or cloaking behaviour was recorded.
• Domain provenance: registration continuity of about 2 years (since 2024); 12 archive snapshots spanning 2024–2026 (3 years tracked) with no content repurposing detected.

Regulatory Verification Notes

The pages contain no identifiable operating entity, no registered company details, and no licence or regulatory reference. Operator identity could not be connected to any real-world brand or person. Ownership and governance are opaque, and the site gives a visitor no accountable party to approach. For a project that invites public participation in a token, this absence is material. Combined with the reputation evidence, it removes any basis for treating the site as an accountable, regulated counterparty. Nothing indicates third-party regulatory recognition. A valid certificate does not alter this assessment, because it only encrypts the connection and says nothing about who operates the site. Evidence:

• Homepage and information pages: no named company, registration number, licence, or accountable contact disclosure.
• Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-08 with 70 days remaining.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the first step is to obtain the operator's real identity and registration details through an independent, offline route, such as the project's officially announced channels or a public company registry, rather than through links on this site. The token branding should be matched against officially announced contract details published by an established, independently verifiable source. Any claim of affiliation, partnership or listing made on the homepage should be confirmed with the named third party directly. The site should be re-checked against threat-intelligence listings before any change in posture is considered. In the meantime, any wallet connection, signature request or credential entry on this site should be treated as unsafe. Evidence:

• Homepage: the token-style title and ticker branding are the only identifying claims presented to visitors, so independent confirmation is required.
• Reputation record: the current malicious and suspicious detections remain the controlling factor until they are cleared by the listing sources.
• Domain profile: a relatively young domain with no recognised external standing offers no independent anchor for confirming the operator.

Summary Verdict

The assessment is low trust with elevated risk. Active threat-intelligence detections and an unidentifiable operator together define the posture, and the clean technical hygiene observed in the sandbox does not offset them. The site is best treated as a potentially hazardous, unaccountable token-promotion page. It can be viewed passively, but it cannot be relied upon.

Infrastructure Integrity

The site sits behind a trusted CDN/WAF, and every observed address belongs to that provider's edge network. The origin server is not observable, so the actual hosting party cannot be independently confirmed, and content could be changed quickly without outside visibility. This protection is a mitigating factor only. It shields the site from some network-level exposure, but it cannot offset the external threat detections or establish legitimacy.

Closing Assessment

Interaction should be limited to passive viewing. No wallet connection, signing, credential entry, or payment should take place on this site, and no downloads should be accepted from it unless the operator's identity and the clearing of the current detections are independently confirmed.