What Gridinsoft observed on 10mmcoin.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260902172543-f817827f
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Unsettled Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The independent current review did not reproduce malware, phishing, credential theft, wallet-secret collection, an unrelated redirect, or another harmful on-domain flow. The disclosed launch link reached the exact stated TENMM Pump.fun object. However, 10mmcoin.com was registered only several days before review, presents a minimal meme-token promotion, lacks substantive historical coverage, and has not yet accumulated enough independent reputation evidence for a whole-domain Safe conclusion. The narrow current result is therefore Unsettled Website, not a claim that a malware sample or malicious URL was found.
Analyst findings
Review 6 documented observations View evidence
HTTP, HTTPS, and www requests converged on the HTTPS apex page and returned the same current 10MM Coin content. The redirect remained within 10mmcoin.com and did not initiate a file download or send the visitor to an unrelated host.
-
HTTP status
200 -
Final URL
https://10mmcoin.com/ - Analyst observation The HTTP apex redirected once to the HTTPS apex; the HTTPS www host redirected once to the same HTTPS apex. All three returned the same reviewed page body.
The public page described TENMM as a Solana entertainment meme token, published a fixed mint address and repeatedly stated that the token has no utility, makes no promises, and creates no expectation of profit. The reviewed page contained no form, iframe, password input, wallet-secret request, automatic download, executable reference, or meta refresh.
- Page element AQSDz8nS5hbGT9agcs6j7rBBBX29t2aQd9nGG45qpump
- Page element No utility. No promises. Just memes.
- Page element There is no expectation of profit. Do your own research.
- Analyst observation Static HTML and referenced page controls exposed zero forms, iframes, password inputs, automatic-refresh instructions, executable or archive links, and wallet-secret collection markers.
The site's launch link redirected to the canonical Pump.fun page for the same published mint address. That public page identified the object as 10MM Coin with symbol TENMM and linked back to the same X and Telegram profiles. No different token address or unrelated destination was observed in this navigation chain.
-
Redirect destination
https://pump.fun/coin/AQSDz8nS5hbGT9agcs6j7rBBBX29t2aQd9nGG45qpump - Page element 10MM Coin (TENMM)
- Public artifact URL https://pump.fun/coin/AQSDz8nS5hbGT9agcs6j7rBBBX29t2aQd9nGG45qpump
- Analyst observation The linked public token record used the same mint address, name, symbol, Telegram profile, and X profile shown by the reviewed domain.
The current public surface was small. The homepage and /home displayed the same token description, /cart displayed an empty branded cart shell, and the advertised privacy and terms paths returned 404. The sitemap contained the site's Squarespace alias and stale template image metadata rather than a separate malicious page.
-
HTTP status
200 - Public artifact URL https://10mmcoin.com/home
- Public artifact URL https://10mmcoin.com/cart
- Analyst observation /privacy and /terms returned 404, while /home reproduced the same promotion and /cart contained no product, checkout form, payment field, or wallet request.
The apex resolved to Squarespace addresses, www used the Squarespace alias, and the site presented a currently valid certificate for 10mmcoin.com. These facts identify the reviewed hosting path but do not by themselves establish long-term reputation or safety.
- DNS fact Observed apex A records: 198.185.159.144, 198.185.159.145, 198.49.23.144, and 198.49.23.145; www resolved through ext-sq.squarespace.com.
- Certificate fact Certificate subject CN=10mmcoin.com; issuer Let's Encrypt YR2; validity 2026-08-27 through 2026-11-25.
- DNS fact The apex published SPF policy v=spf1 -all and Squarespace authoritative nameservers.
The domain was registered on 2026-08-27 and had only several days of public history at review time. Public Wayback, urlscan, and OTX searches returned no records for the apex or www host, so there was not enough independent historical coverage to convert the current clean-page observation into a mature whole-domain reputation conclusion.
- Analyst observation Verisign RDAP recorded registration at 2026-08-27T19:34:56Z.
- Analyst observation Wayback CDX returned zero successful captures; urlscan returned zero public results; OTX returned zero pulses and zero URL records for 10mmcoin.com and www.10mmcoin.com.
- Analyst observation The fresh current review did not identify a specific malicious URL, file, payload, hash, credential receiver, or harmful execution trace.
Scope and limitations
- The review covered the public apex, www, /home, /cart, robots, sitemap, policy-path responses, page code, redirects, the disclosed launch destination, DNS, and TLS at the recorded time; no authenticated or private administration area was accessed.
- The review did not connect a wallet, buy or sell the token, execute an on-chain transaction, validate future donation claims, or establish the promoter's verified real-world identity.
- Public search, archive, sandbox, and threat-intelligence coverage is incomplete; unavailable authenticated APIs and challenge-protected search pages were treated as unknown rather than clean.
- The absence of a current malicious object does not predict future content or token-market behavior, and the Unsettled Website category should not be described as proof of malware.
Help protect others by sharing this page on social media! The more people who know about 10mmcoin.com, the fewer chances they have to deceive someone else. Help others evaluate 10mmcoin.com by sharing this page on social media!