Is catesallocation.com a scam? TrustSniffer's high-risk assessment: 3/100

Overview

$CATE | Catecoin is a promotional website for a meme-style cryptocurrency token branded as "the Internet's Cat". The homepage presents token-branded marketing content, and its apparent purpose is to build a community around, and attract participation in, the token. The site is hosted on a very recently registered domain whose name ("catesallocation") refers to an allocation, not to the token brand shown on the page.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent threat-intelligence engines currently flag the domain as malicious, and one more rates it suspicious. An external blacklist entry corroborates them, so the domain is blacklisted by more than one source. No brand impersonation, phishing page, or conflicting legal identities were confirmed, but the blacklist convergence alone places this site in a clearly high-risk posture. The domain was registered only months ago, and its name does not match the token brand on the homepage. This is a recognised pattern for short-lived token-promotion and claim-style campaigns, in which a fresh domain is stood up and discarded. The homepage's behaviour adds to the concern. About 27 background requests and 9 data submissions went to external destinations, and almost all external traffic went to third-party hosts. The page also produced a dozen script errors. In mitigation, the sandbox runs found no wallet-drainer behaviour, clipboard tampering, hidden forms, or credential posts to outside hosts. That reduces the evidence of active theft mechanics but does not offset the reputation findings. Evidence:

• Homepage and domain-level reputation: three security engines classify the domain as malicious and one as suspicious, and an external blacklist also lists it.
• Domain registration: registered 2026-08-05 (~0.22 years, about 82 days old) through Dominet (HK) Limited.
• Homepage behaviour across three sandbox runs: 27 external background requests, 9 external POSTs, about 98% of external traffic going to third parties, and 12 console errors.
• Homepage title promotes "$CATE | Catecoin", which does not correspond to the "allocation" wording in the domain name.

Regulatory Verification Notes

No financial-services registration, licence, or regulator match is associated with this site, and no third-party broker-reputation record was found. A token-promotion site that invites participation would normally be expected to disclose a responsible legal entity and the legal terms of any offering. The evidence does not show that disclosure, which is a verification gap. By itself that gap is not proof of wrongdoing, but here it compounds the confirmed threat listings. The site's identity could not be independently connected to a real-world brand, company, or individual, so any claims on the pages about the token's backing, team, or community should be treated as unverified. Evidence:

• Homepage: promotional token branding with no regulator-verifiable entity identified in the available evidence.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2027-01-01. This only confirms an encrypted connection, not the operator's identity.

What to Verify Next

Any contact with the site's operators should be preceded by independent checks outside the site. Confirm the token's official name, contract address, and channels through established third-party token directories and the project's claimed team, not through links on this domain. Search the claimed operator against official company and securities registries in the relevant jurisdiction. Check whether the domain appears in current phishing or scam-report databases and community warnings. Confirm any official support or contact channels through an independent route. Evidence:

• Homepage: token claims and branding are the primary items to corroborate externally.
• Domain registration: the domain is under three months old, so no long operating record exists to rely on.
• Threat listings: the current flags should be re-checked before any decision to interact.

Summary Verdict

The site sits in a clearly elevated-risk posture. Multiple threat-intelligence sources converge against it, and the domain has no operating history. Its valid encryption and mainstream hosting do not establish legitimacy, and its real-world operator remains unverified.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and all observed addresses are CDN edge servers. The origin server was not observable, so the real hosting location cannot be independently checked. This is a mitigating factor only. Protective infrastructure is available to any customer, including operators of abusive sites, and it cannot offset the reputation findings. It can also let site content change quickly without any visible change in hosting.

Closing Assessment

This domain should not be used for wallet connections, token purchases, account creation, or any credential or payment entry. Any interaction should be limited to passive viewing from an isolated environment, and users who have already interacted with it should review their wallet permissions and account security.