--- title: "Is zcat-enroll.com a Scam? Trust Score 9/100" source: TrustSniffer type: Website trust & fraud report subject: "zcat-enroll.com" verdict: "Critical Risk" title: "Is zcat-enroll.com a Scam? Risk Report, Score 9/100" trust_score: 9 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/zcat-enroll.com assessed: 2026-10-21 --- # Is zcat-enroll.com a scam? TrustSniffer's high-risk assessment: 9/100 ## Verdict **Verdict: Critical Risk, trust score 9/100.** zcat-enroll.com shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-21 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | ZCAT is a Solana meme coin whose 3% transfer tax is converted to Zcash and distributed to holders, with a Season 1 airdrop claim page. The page promises ongoing ZEC payouts and allocation tiers, but it does not verify the team, payout totals, or claim mechanism. Its own disclaimers state there is no expected return, which conflicts with the reward promises. The claim date is also already past, so the page's status is unclear. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | None flagged it (VirusTotal) | Clear | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear | | Domain age | 1 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (5 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YR2) | Noted | ## The page as captured ![Screenshot of the zcat-enroll.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/zcat-enroll.com/screenshots/first.png) _What zcat-enroll.com served when TrustSniffer captured it on 2026-10-21. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag. ## Full analysis ### Overview ZCAT-enroll.com is a single-page Solana meme-coin landing page titled "ZCAT — Anonymous Cat · Airdrop Season 1". It invites visitors to "Hold the cat. Get paid in ZEC" and to claim a Season 1 token allocation. The page's apparent business model is a holder revenue-share. A 3% tax on every $ZCAT buy, sell and transfer is said to be converted to Zcash and streamed to wallets holding the token. Holders are therefore paid for holding rather than for any verifiable product or service. ### Scam/Impersonation Risk No contradictions were observed. There is no brand impersonation, no conflicting legal identities, no phishing hit and no confirmed threat-list entry. The page still carries several fraud-relevant content signals that warrant a clearly cautionary reading. Its marketing promises payouts that are "automatic, forever" and cites "2,320 ZEC already paid out", "470k+ payouts" and a market capitalisation of about $60 million. Its own FAQ and disclaimers state there is no expected return and that payouts stop if trading volume stops. This is a direct dissonance between the promise and the fine print. None of the payout or holder figures can be checked from the page, and the team is described as "anonymous by design". The Season 1 claim countdown shows zeros and a 21 September 2026 opening date that has already passed. The timeline still presents the claim as upcoming, so the content is stale or inconsistent, and the urgency cue it creates is unreliable. Automated interaction testing also showed the page content changing completely after interaction, which the assessment treats as a strong cloaking indicator. Separately, two abuse reports exist against the IP address 82.202.171.139, operated by JSC Datacenter (webdc.ru), a data-centre and web-hosting provider. The reports carry full confidence and the address is not whitelisted. They are attributed to shared infrastructure, so they apply to the provider's shared IP and not specifically to this site. The reports have not been discounted, and they stay visible as a soft third-party reputation note about the hosting environment. They are not a finding against the site operator. The registered domain name, with its "enroll" suffix, frames a token-claim flow as an enrolment, which suits a time-pressured sign-up pattern. The evidence does not show that it imitates an existing brand. Evidence: - Homepage: promises ZEC payouts "automatic, forever" while its disclaimers state no expected return and that payouts cease if volume stops. - Homepage: the claim countdown reads zero and a 21 September 2026 opening date remains displayed as upcoming, although that date has passed. - Behavioural testing of the homepage: content differed fully between the initial and post-interaction views, a strong cloaking indicator. - Two abuse reports on shared hosting IP 82.202.171.139 (JSC Datacenter, webdc.ru). The attribution is shared infrastructure and the reports are not discounted. This is a soft reputation note about the provider and not a finding about the operator. - Domain registered 2026-09-18 (~0.09 years, about 33 days old); 5 archive snapshots spanning 2026-09-18 to 2026-09-29 (1 year tracked, all in 2026). The history is entirely recent. ### Regulatory Verification Notes The homepage names no legal entity and no operator, and it gives no physical address or contact channel. It claims no licence or registration, and none is verified. The token is presented as a financial-style reward scheme, but nothing on the page shows that it has been assessed by any securities or digital-asset regulator. These are disclosure gaps that bear on verification. They are not proof of wrongdoing, and no third-party broker or regulatory-database match exists to add context. Identity verification is unverified (score 30, confidence 0.5), with no identity signals found. The real-world operator therefore remains unconfirmed, and the page's "anonymous" branding and any identity claims cannot be treated as evidence of legitimacy. The domain was registered through the Dominet (HK) Limited registrar. The site's transport encryption is valid, but it is a basic domain-validated certificate, which confirms only control of the domain and says nothing about who operates it. Evidence: - Homepage and FAQ: no company name, licence reference, jurisdiction or contact route is shown; only disclaimers and a contract-style token description appear. - Registration through Dominet (HK) Limited; expiry set for 2027-09-18. - TLS certificate issued by YR2 (DV), valid to 2026-12-17. - Hosted on AS29182 (RU-JSCIOT, JSC IOT, Russia), an infrastructure choice that carries no regulatory assurance. ### What to Verify Next Verification should begin with independent, on-chain confirmation of the token contract. Reviewers can check the contract address and holder distribution in a public block explorer and compare them with the claimed payout history. Whether the advertised 3% tax actually converts to ZEC and reaches holders can be tested the same way, and the page's payout total and payout count are worth confirming against those records. The claim window also needs clarifying. The page does not make clear whether the 21 September 2026 allocation is still open, closed or already distributed. Any official project identity should be confirmed through channels reached independently, not through links on this page. A wallet should not be connected, and no $20 minimum holding should be acquired, before these checks are complete. Evidence: - Homepage mechanics section: the $20 self-custody holding threshold and "no claim needed" payout statement are testable on-chain. - Homepage timeline: the claim date has passed, yet the status is still presented as upcoming. - Homepage: the payout total and payout count are given without any source or audit. ### Summary Verdict The overall posture is clearly cautionary. The site is a very new token promotion presented as anonymously operated, whose claims cannot be substantiated from the page and whose own disclaimers undercut its marketing. Its behaviour under testing adds to the concern. No identity contradiction or confirmed threat-list entry was found. The two abuse reports on the shared hosting IP are a soft reputation note and not a finding against the operator. The combined evidence supports an elevated risk assessment for any sensitive financial or credential-related interaction. ### Infrastructure Integrity The site resolves to a single address at a Russia-based data-centre provider. No CDN or WAF fronts it, so the server answers visitors directly and no protective layer mitigates exposure. The hosting country and the registry region are also mismatched. The two abuse reports on that shared address remain undiscounted, but they reflect the provider's shared environment and not necessarily this site. The domain has a very thin footprint, with few subdomains and little supporting infrastructure, and the transport-encryption certificate is the only clearly positive technical element. ### Closing Assessment Interaction should be limited to viewing the page. Wallet connections, token purchases and any credential or payment submission should wait until the token contract, payout record and operator identity have been confirmed independently. _Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 2 findings contributed to this verdict, raised by page content, hosting and network. ### 01 Page content - The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`) - The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`) - The review of the page content rated it moderate risk. (Page content `rule:PAGE_RISK_MED`) - The page content shows at least one warning sign that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_SOME`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### Signals weighed against the site - AbuseIPDB: 2 reports on hosting IP 82.202.171.139 (JSC Datacenter, Data Center/Web Hosting/Transit), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of zcat-enroll.com. - The request stayed on zcat-enroll.com. It was not redirected to another domain. (Clear) - Registration is published under Dominet (HK) Limited. (Clear) - DNS for this domain is served by dyna-ns.net, across 2 name servers. (Noted) - The registration is paid up to 2027-09-18. (Noted) - The earliest public archive of this site is from 2026-09-18. (Clear) - It is hosted on RU-JSCIOT, from a server in RU. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Dominet (HK) Limited | | Hosting | RU-JSCIOT - JSC IOT, RU | | Country | RU | | Server IP | 82.202.171.139 | | Name servers | NS1.DYNA-NS.NET, NS2.DYNA-NS.NET | | CDN / edge network | Not detected | | Resolved IP addresses | 1 | | Edge IP addresses | 0 | | Likely origin IP addresses | 1 | | SSL issuer | YR2 | | SSL expiry | 2026-12-17 | | Domain age | 0.09 years (continuous registration) | | Domain expiry | 2027-09-18 | | Archive first seen | 2026-09-18 | | Archive snapshots | 5 | | Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 1% confidence, 2 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about zcat-enroll.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [xrpl-promotion.net](https://trustsniffer.com/report/xrpl-promotion.net), also hosted by RU-JSCIOT (Critical Risk, 0/100) - [realmebel.pro](https://trustsniffer.com/report/realmebel.pro), also hosted by RU-JSCIOT (Critical Risk, 0/100) - [i-trailer.ru](https://trustsniffer.com/report/i-trailer.ru), also hosted by RU-JSCIOT (High Trust, 90/100) - [metro-telecom.ru](https://trustsniffer.com/report/metro-telecom.ru), also hosted by RU-JSCIOT (High Trust, 100/100) - [znakomstva.ru](https://trustsniffer.com/report/znakomstva.ru), also hosted by RU-JSCIOT (High Trust, 100/100) - [bestmebelshop.ru](https://trustsniffer.com/report/bestmebelshop.ru), also hosted by RU-JSCIOT (High Trust, 90/100) - [nethost.ru](https://trustsniffer.com/report/nethost.ru), also hosted by RU-JSCIOT (Moderate Trust, 50/100) - [ns-bank.ru](https://trustsniffer.com/report/ns-bank.ru), also hosted by RU-JSCIOT (High Trust, 100/100) - [abster-zr41n3r-sol.pages.dev](https://trustsniffer.com/report/abster-zr41n3r-sol.pages.dev), another site assessed as critical-risk (Critical Risk, 21/100) - [newscanner-six.vercel.app](https://trustsniffer.com/report/newscanner-six.vercel.app), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) - [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23) --- *Source: [TrustSniffer](https://trustsniffer.com/report/zcat-enroll.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/zcat-enroll.com · assessed 2026-10-21.*