Is catecoinrevshare.com safe? TrustSniffer's low-trust assessment: 30/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page landing site titled "Catecoin | Airdrop". It presents a token-airdrop and revenue-share style promotion for a project called Catecoin, with only a short block of page text and no other site structure. Its apparent purpose is to draw visitors into a cryptocurrency token distribution or participation scheme.

Scam/Impersonation Risk

This is the decisive area of concern. A major security vendor currently flags the domain as malicious, and other scanning engines independently rate it suspicious. This amounts to a confirmed blacklist listing. The listing converges with a very recent registration and a minimal public footprint. Crypto airdrop landing pages of this kind are a common vehicle for wallet-connection lures and token-claim fraud, and a freshly registered domain with a project-style name fits that pattern. The homepage does not name the products or mechanics it offers, so the specific airdrop and revenue-share claims cannot be tested against any documentation. No brand impersonation, conflicting legal identities or confirmed phishing content were observed. In sandbox runs the page showed no external network calls, no wallet-connection or drainer behaviour, no clipboard manipulation, no hidden forms and no cloaking. These behaviours are mitigating, but they do not offset the active threat listing, and a page that is benign when captured can be changed quickly. Evidence:

• Homepage: titled as a token airdrop, with a short body of text and no further pages or documentation.
• Domain registration: created 2026-09-18 (~0.09 years old), so the domain is only weeks old.
• Web archive: 3 snapshots, 2026-09-18 to 2026-09-25 (1 year tracked). This is a short and sparse history that began at registration.
• Homepage behaviour: three consecutive sandbox visits returned stable responses with zero external requests and no wallet-connect activity.

Regulatory Verification Notes

The homepage discloses no operating company, jurisdiction, licence, registration number or terms, so no regulatory standing can be established. Independent identity verification of the operator was not achieved, and registrant details are not public. That is an administrative limitation and not a contradiction in itself. The absence of disclosures is a verification gap and not proof of fraud, but it removes the credibility that disclosures would otherwise add to a domain carrying a threat listing. No third-party broker or regulator record was matched to this domain. Any claim of regulated or licensed status for the token programme would therefore need to be proven independently. Evidence:

• Registrar: the domain is registered through NICENIC International Group Co., Limited, with registration running to 2027-09-18.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by YE1 at DV (domain-validated) level and valid to 2026-12-16. DV certification confirms control of the domain only, not the identity of the operator.
• Homepage: no legal entity, licence or registration details are published.

What to Verify Next

Any dealings should be preceded by confirming that a legitimate, identifiable project called Catecoin exists, through its official channels reached by an independent route and not through links on this page. The claimed airdrop and revenue-share terms should be corroborated in publicly auditable sources. These include a published token contract on a block explorer, independent project coverage and verifiable team identities. The site's threat listing should be re-checked with the reporting security vendor to see whether it has been cleared. Until then, no wallet should be connected and no signature or token approval should be granted from this site. Confirmation of the official contact channels should also come from an independent source. Evidence:

• Threat listing: a security vendor's malicious flag and two suspicious ratings are currently active against the domain.
• Homepage: the airdrop and revenue-share concept is stated without terms, contract references or team information.
• Domain history: the domain is weeks old and has no established archive record to corroborate a pre-existing project.

Summary Verdict

The available evidence supports an elevated-risk posture. An active external threat listing is the decisive factor. A very new, thinly documented domain with unverified operator identity compounds it, and neither a valid certificate nor clean sandbox behaviour offsets it. The site cannot be treated as trustworthy for any sensitive purpose.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed IP address is a Cloudflare edge address. No origin server was observable. Cloudflare's presence is a mitigating factor only. It prevents independent verification of the hosting and can mask rapid content changes. It offers no evidence about the legitimacy of the operator. The infrastructure also shows a very young domain with few subdomains, which is an unconfirmed pattern and not a proven risk.

Closing Assessment

The site should be treated as read-only at most. No wallet connection, login, credential entry, signature, token approval or payment should take place on it, and nothing should be downloaded from it unless and until the threat listing is cleared and the project is independently verified.