Is zcat-enroll.com a scam? TrustSniffer's high-risk assessment: 9/100

Overview

ZCAT-enroll.com is a single-page Solana meme-coin landing page titled "ZCAT — Anonymous Cat · Airdrop Season 1". It invites visitors to "Hold the cat. Get paid in ZEC" and to claim a Season 1 token allocation. The page's apparent business model is a holder revenue-share. A 3% tax on every $ZCAT buy, sell and transfer is said to be converted to Zcash and streamed to wallets holding the token. Holders are therefore paid for holding rather than for any verifiable product or service.

Scam/Impersonation Risk

No contradictions were observed. There is no brand impersonation, no conflicting legal identities, no phishing hit and no confirmed threat-list entry. The page still carries several fraud-relevant content signals that warrant a clearly cautionary reading. Its marketing promises payouts that are "automatic, forever" and cites "2,320 ZEC already paid out", "470k+ payouts" and a market capitalisation of about $60 million. Its own FAQ and disclaimers state there is no expected return and that payouts stop if trading volume stops. This is a direct dissonance between the promise and the fine print. None of the payout or holder figures can be checked from the page, and the team is described as "anonymous by design". The Season 1 claim countdown shows zeros and a 21 September 2026 opening date that has already passed. The timeline still presents the claim as upcoming, so the content is stale or inconsistent, and the urgency cue it creates is unreliable. Automated interaction testing also showed the page content changing completely after interaction, which the assessment treats as a strong cloaking indicator. Separately, two abuse reports exist against the IP address 82.202.171.139, operated by JSC Datacenter (webdc.ru), a data-centre and web-hosting provider. The reports carry full confidence and the address is not whitelisted. They are attributed to shared infrastructure, so they apply to the provider's shared IP and not specifically to this site. The reports have not been discounted, and they stay visible as a soft third-party reputation note about the hosting environment. They are not a finding against the site operator. The registered domain name, with its "enroll" suffix, frames a token-claim flow as an enrolment, which suits a time-pressured sign-up pattern. The evidence does not show that it imitates an existing brand.

Regulatory Verification Notes

The homepage names no legal entity and no operator, and it gives no physical address or contact channel. It claims no licence or registration, and none is verified. The token is presented as a financial-style reward scheme, but nothing on the page shows that it has been assessed by any securities or digital-asset regulator. These are disclosure gaps that bear on verification. They are not proof of wrongdoing, and no third-party broker or regulatory-database match exists to add context. Identity verification is unverified (score 30, confidence 0.5), with no identity signals found. The real-world operator therefore remains unconfirmed, and the page's "anonymous" branding and any identity claims cannot be treated as evidence of legitimacy. The domain was registered through the Dominet (HK) Limited registrar. The site's transport encryption is valid, but it is a basic domain-validated certificate, which confirms only control of the domain and says nothing about who operates it.

What to Verify Next

Verification should begin with independent, on-chain confirmation of the token contract. Reviewers can check the contract address and holder distribution in a public block explorer and compare them with the claimed payout history. Whether the advertised 3% tax actually converts to ZEC and reaches holders can be tested the same way, and the page's payout total and payout count are worth confirming against those records. The claim window also needs clarifying. The page does not make clear whether the 21 September 2026 allocation is still open, closed or already distributed. Any official project identity should be confirmed through channels reached independently, not through links on this page. A wallet should not be connected, and no $20 minimum holding should be acquired, before these checks are complete.

Summary Verdict

The overall posture is clearly cautionary. The site is a very new token promotion presented as anonymously operated, whose claims cannot be substantiated from the page and whose own disclaimers undercut its marketing. Its behaviour under testing adds to the concern. No identity contradiction or confirmed threat-list entry was found. The two abuse reports on the shared hosting IP are a soft reputation note and not a finding against the operator. The combined evidence supports an elevated risk assessment for any sensitive financial or credential-related interaction.

Infrastructure Integrity

The site resolves to a single address at a Russia-based data-centre provider. No CDN or WAF fronts it, so the server answers visitors directly and no protective layer mitigates exposure. The hosting country and the registry region are also mismatched. The two abuse reports on that shared address remain undiscounted, but they reflect the provider's shared environment and not necessarily this site. The domain has a very thin footprint, with few subdomains and little supporting infrastructure, and the transport-encryption certificate is the only clearly positive technical element.

Closing Assessment

Interaction should be limited to viewing the page. Wallet connections, token purchases and any credential or payment submission should wait until the token contract, payout record and operator identity have been confirmed independently.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 82.202.171.139 (JSC Datacenter, Data Center/Web Hosting/Transit), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.