What Gridinsoft observed on catonsolana.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260815172142-51d512a7
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The independent first-party review did not reproduce malware delivery or credential phishing. However, the site promotes a speculative Solana meme token and directs users to trading and market services without identifying a legal operator, providing a contact route, publishing a substantive privacy policy, or presenting clear risk disclosures. The appropriate current verdict is Suspicious Website, not a claim that a specific malware payload was found.
Analyst findings
Review 3 documented observations View evidence
The site returned HTTP 200 and promoted a specific Solana meme token using live Pump.fun analytics and story content. The delivered application linked users to Pump.fun, Dexscreener, Solscan, and an X account.
-
HTTP status
200 -
Final URL
https://catonsolana.com/ - Page element $CAT on Solana — Live Pump.fun Analytics & Story
- Public artifact URL https://pump.fun/coin/FEbCvTYaZXay4SJTmovVY67DJ2WEWLGG6i8S2PdYpump
- Public artifact URL https://solscan.io/token/FEbCvTYaZXay4SJTmovVY67DJ2WEWLGG6i8S2PdYpump
The advertised privacy route and /privacy-policy both returned the same token-promotion single-page application as the homepage. The reviewed public site did not identify a legal operator, contact route, token-risk disclosure, or a substantive privacy policy.
-
HTTP status
200 - Public artifact URL https://catonsolana.com/privacy
- Public artifact URL https://catonsolana.com/privacy-policy
- Analyst observation Both paths returned the same 10585-byte application shell and homepage title.
The domain resolved and presented a currently valid certificate. Static client-code review identified market and explorer links but no automatic executable download or directly reproduced credential-harvesting form.
- DNS fact A records observed: 92.113.16.30 and 92.113.23.210.
- Certificate fact Certificate subject CN=catonsolana.com; valid through 2026-11-13.
- Analyst observation No executable download or credential-submission form was identified in the reviewed client code.
Scope and limitations
- The result applies to the public application, redirects, linked destinations, DNS, TLS, and client-delivered code reviewed at the recorded time.
- The review did not purchase the token, connect a wallet, execute a transaction, or establish the real-world identity of the promoter.
Help protect others by sharing this page on social media! The more people who know about catonsolana.com, the fewer chances they have to deceive someone else. Help others evaluate catonsolana.com by sharing this page on social media!