Is enroll-catecoin.com safe? TrustSniffer's moderate-trust assessment: 55/100

Overview

The website enroll-catecoin.com is a single-page crypto-token promotion titled "ZCAT — Anonymous Cat · Airdrop Season 1". It presents an "anonymous cat" token brand and invites visitors to enroll in a first-season airdrop. Its apparent purpose is community acquisition and token distribution for a newly launched meme-style crypto project.

Scam/Impersonation Risk

No contradictions were observed. The site shows no confirmed phishing, no brand impersonation, and no conflicting legal identities. The sandbox ran the homepage three times and found no wallet-connection prompts, no wallet-drainer behaviour, no clipboard manipulation, no hidden or externally posting credential forms, and no cloaking. The reputation picture is mixed but soft. One threat-intelligence engine flagged the domain, and no second source corroborated it. Two abuse reports exist against the hosting address, and those reports attach to a shared datacenter IP rather than to the site itself. The page also made a high proportion of requests to external services during interaction, including several external data submissions. All of these went to recognised destinations. Airdrop-enrollment pages are a common lure format in the token ecosystem, and the site is only weeks old with no established track record. That is the main reason this reads as an unproven project rather than a vetted one. Evidence:

• Homepage: titled as an "Airdrop Season 1" for an "anonymous cat" token. Three of three sandbox runs completed with no wallet-provider detection and no console errors.
• Homepage behaviour: 15 external fetch requests and 6 external POSTs were observed, all to recognised destinations. External traffic reached about 82% at its peak, and DOM changes after interaction were modest.
• Domain provenance: Registered 2026-09-08 (~0.12 years, about 43 days old).
• Web-archive depth: 1 archive snapshot in 2026 (1 year tracked), so there is no meaningful historical footprint.

Regulatory Verification Notes

The homepage content captured for this assessment does not tie the project to a named legal entity, jurisdiction, licence, or registration. The project's identity could not be independently connected to a real-world operator. On-page disclosure is unclear, and ownership details are incomplete. This is a transparency and verification matter. It is not evidence of wrongdoing. Token-distribution projects generally sit outside conventional financial licensing, so the absence of a licence is not conclusive here. Any promise of value, redemption, or returns would still warrant scrutiny. No third-party broker or regulatory-database entry was found for the site, which means there is neither corroboration nor an adverse finding. Evidence:

• Homepage: no operator name, company registration, or licensing statement appears in the captured page text.
• Domain registration: registered through Dominet (HK) Limited, with expiry set for 2027-09-08.
• Hosting: served from AS29182 (RU-JSCIOT, JSC IOT), in Russia.
• Transport encryption: TLS certificate issued by YR1 (domain-validated, DV), valid to 2026-12-10.

What to Verify Next

Before engaging, a prospective participant should look for independent confirmation that the ZCAT project exists beyond this domain. That means official announcements from known channels, an identifiable team, and token-contract references that can be checked on a public blockchain explorer. Any enrollment or eligibility claims should be checked against those independent sources. The official contact and social channels should be confirmed through a route the site does not control. The project's stated terms should be located and read before any wallet or personal data is shared. Because the domain is very new, a re-check after a few more weeks of operation would show whether its footprint grows consistently. Evidence:

• Homepage: airdrop enrollment is the central call to action, and no operator or contract details appear in the captured text.
• Domain history: the registration is weeks old and has a single archive capture, so the site's claims cannot yet be tested against a track record.
• Reputation: one unconfirmed detection and two hosting-IP abuse reports are on file, and they should be re-checked for any corroboration.

Summary Verdict

The site reads as a newly launched, unverified crypto-promotion property with a moderate trust posture. Its technical behaviour is clean, with no confirmed malicious activity and no contradictory identity signals. Its legitimacy cannot be established from the available evidence, because the operator is unidentified and there is almost no operating history.

Infrastructure Integrity

The site resolves to a single IP address on a Russian datacenter provider's shared hosting. No CDN or WAF fronts it, so the origin server is directly exposed and no protective layer mitigates that exposure. The transport certificate is valid and issued by a recognised authority, which is a baseline hygiene signal only. Unconfirmed network heuristics note that the hosting country and registry region do not match, and that the domain is young with few subdomains. These are weak indicators consistent with a new deployment and are not confirmed risks.

Closing Assessment

Browsing the site is reasonable. Before connecting a wallet, entering credentials, or committing funds, a prospective user should first obtain independent confirmation of the project and its operators.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 82.202.171.139 (JSC Datacenter, Data Center/Web Hosting/Transit), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.