What Gridinsoft observed on Gaducoin.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260827205743-50596236
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The independent current review supports Suspicious Website, but not a malware label. gaducoin.com directly solicits trading in a highly speculative token while making material assurances of a permanently rising price floor, worldwide official affiliation, and an independent DEXTools audit with mathematical certainty, without publishing reproducible authorization or audit evidence. The core contract address, renounced ownership, fixed current fee design, and almost entirely burned LP supply were substantially confirmed, and no specific malware object or harmful exact URL was found. The classification is therefore retained for current financial and trust-presentation risk, independently of external blacklist data.
Analyst findings
Review 9 documented observations View evidence
The exact appealed host is the registrable parent domain. HTTP and the www HTTP entry redirect to the HTTPS apex, which returned HTTP 200 with the current GADUCoin marketing page. Desktop, mobile, Googlebot, Bingbot, Gridinsoft, and referrer-based requests returned the same 27,452-byte HTML and visible-text hashes; no cloaking or changing destination was reproduced.
-
HTTP status
200 -
Final URL
https://gaducoin.com/ - File SHA-256 5c0c3b475ffd1642924fcca93203087a07cac5f4c7bf0ed35206a49ed1504a90
- Analyst observation All seven request profiles returned the same HTML hash and the same visible-text hash d7b5b16e565245c5213f81039a178205a31967764aaf2eae8d463889fd3e8bcd.
The sitemap exposed only the apex page; /index served the same page. The public page linked to the stated Ethereum token on Uniswap, the corresponding Uniswap V2 pair chart, a GitHub-hosted White Paper, and the project's X profile. It contained no HTML form or input, wallet-connection request, password or recovery-secret field, iframe, executable or archive download, or same-site account, payment, login, contact, or download workflow. The only active client-side reporting observed was the standard Mixo page-view beacon and optional analytics loader.
- Page element Trade on Uniswap links to token 0x6e4C60A88F601da28da9D0197c6C83C25e2Dd5Da.
- Page element View Live Chart links to Uniswap V2 pair 0xC55603E2FacafafC0d353C69a94e0b6C1eb51745.
- Public artifact URL https://github.com/xtp1983p7w4/WhitePaperGADUCoin/blob/main/GADUCoin_Whitepaper_Official.pdf
- Analyst observation No specific malware file, payload, credential receiver, malicious download URL, harmful exact URL, or file hash was identified in the reviewed public deployment.
The on-chain address linked by the site is a verified, non-proxy ERC-20 contract named GADUCoin with symbol GADU and 18 decimals. The recorded owner is the zero address after the published renounceOwnership transaction. The verified source contains no later mint function, pause function, blacklist, or transfer-censorship control; its owner-only fee setter cannot be called after renouncement. The source applies 5% burn and 5% liquidity fees to pair buys and sells, and the current total supply is approximately 879.523 billion GADU after on-chain burns.
- Public artifact URL https://eth.blockscout.com/address/0x6e4C60A88F601da28da9D0197c6C83C25e2Dd5Da
- Public artifact URL https://eth.blockscout.com/tx/0x854de8d355dc7bcb45f95d1555e58cf7778e5fa55c6548bf423bf6c22c0c7e05
- Analyst observation owner() returned 0x0000000000000000000000000000000000000000; burnFeeBps was 500; verified source initialized liquidityFeeBps to 500 and permits changes only through onlyOwner.
- Analyst observation The verified creation transaction minted 1,000,000,000,000 GADU once; the current total supply was 879,522,657,153.471786520013358792 GADU.
The website and White Paper identify the same Uniswap V2 pair. The published liquidity-burn transaction transferred LP tokens to the conventional dead address. Current public holder data showed approximately 99.964% of the pair's LP supply at that dead address, with the small remainder held by the Uniswap TokenJar contract. This substantially supports the burned-liquidity claim, but it does not prove a guaranteed token price or eliminate every non-liquidity market risk.
- Public artifact URL https://eth.blockscout.com/tx/0x9d0e5fe2bb52a61e667542a540b687b8f799e696689cefdce7087b81367331cd
- Public artifact URL https://eth.blockscout.com/token/0xC55603E2FacafafC0d353C69a94e0b6C1eb51745
- Analyst observation Dead-address LP balance 1,248,126.136502842181330036 of total LP supply 1,248,574.683012594366108428; TokenJar held the remainder.
The current site directly encourages visitors to trade the token and describes automatic liquidity as creating a permanently rising price floor. It also presents GADUCoin as the official cryptocurrency for Freemasons worldwide without identifying a Masonic governing body or publishing an authorization record. These are material financial and affiliation assurances that were not established by the on-chain facts or the linked public documents.
- Page element Trade on Uniswap
- Page element A 5% Liquidity Fee is taken from every trade and automatically injected back into the Uniswap pool, creating a permanently rising price floor for all holders.
- Page element GADUCoin is presented as the official cryptocurrency for Freemasons worldwide.
- Analyst observation The reviewed site, White Paper, GitHub repository, and linked social profile did not identify an authorizing Masonic governing body or supply a public authorization record.
The five-page White Paper states that DEXTools audited and verified the project and that this gives investors mathematical certainty that the code has no backdoors or centralized control. The document names no auditor, audit date, methodology, report identifier, findings, or audit-report URL. The site's DEXTools link is a pair-chart URL rather than a linked audit artifact. The same White Paper does include a clear speculative-asset and volatility disclaimer, but that disclaimer does not substantiate the separate audit and certainty claims.
- Public artifact URL https://github.com/xtp1983p7w4/WhitePaperGADUCoin/blob/main/GADUCoin_Whitepaper_Official.pdf
- Page element The White Paper says the project was audited and verified by DEXTools and describes mathematical certainty that the code operates without backdoors or centralized control mechanisms.
- Analyst observation No independent audit report, named auditor, audit date, methodology, report identifier, findings, or audit-report URL was present in the reviewed White Paper or linked site surface.
- Page element The White Paper also states that the token is purely speculative, promises no future returns, may fluctuate drastically, and should not be purchased with funds needed for basic well-being.
The three supplied screenshots accurately showed the current public marketing page, its White Paper, Uniswap, chart, and contract links, and the Portal's prior Suspicious Website result with zero vendor detections. They supported the identity and presentation claims, but static screenshots did not test redirect behavior, executable delivery, credential collection, smart-contract controls, liquidity ownership, or the accuracy of the audit and price assurances.
- Analyst observation Two screenshots showed the current GADUCoin marketing page and its public resource links; one showed the Portal report with zero vendor detections.
- Analyst observation The screenshot contents were consistent with the live site and current Portal state but were not behavioral or smart-contract evidence.
The apex used the Mixo customer host through Cloudflare and presented a valid Google Trust Services certificate for gaducoin.com. The www host resolved to a Namecheap forwarding address and its HTTP entry redirected to the apex, but a direct HTTPS connection to www.gaducoin.com did not complete during the review. This is a www availability and TLS configuration limitation, not evidence of a malicious destination.
- DNS fact gaducoin.com CNAME gaducoin-com.customer.mixo.io; www.gaducoin.com A 192.64.119.144.
- Certificate fact The apex certificate named gaducoin.com and was valid from 2026-07-29 through 2026-10-27.
-
Redirect destination
http://www.gaducoin.com/ redirected to https://gaducoin.com/. - Analyst observation A direct TLS connection to https://www.gaducoin.com/ timed out during the review.
The exact host and registrable parent are the same apex domain; www is a child host. Public urlscan search returned zero apex and www results. OTX reported zero pulses and no indexed URLs. Triage and URLQuery returned no exact-domain reports. Exact-domain web searches found the project site and project-controlled resources but no public Hybrid Analysis, ANY.RUN, Joe Sandbox, URLhaus, ThreatFox, or other behavioral sample record. Recent public URLhaus, ThreatFox, and OpenPhish feeds had no exact-domain match. Wayback availability and timemap interfaces returned no apex or www snapshot. These absences do not prove every possible URL safe.
- Public artifact URL https://urlscan.io/
- Public artifact URL https://otx.alienvault.com/indicator/domain/gaducoin.com
- Analyst observation urlscan apex results 0; urlscan www results 0; OTX pulses 0; OTX URL records 0; Triage reports 0; URLQuery reports 0.
- Analyst observation Wayback returned no available or timemap snapshot for gaducoin.com or www.gaducoin.com.
- Analyst observation URLhaus and ThreatFox historical APIs required authorization; Common Crawl was unavailable. These sources were treated as unverified rather than clean.
Scope and limitations
- The review covered the public apex and www entry points, the only sitemap page, linked client-side assets, the supplied White Paper, public Ethereum contract and pair records, DNS, TLS, public indexes, and available archive interfaces at the recorded time.
- No token purchase, sale, wallet approval, signature, or transfer was performed; market execution, future liquidity, price behavior, and every possible holder action were not tested.
- The verified Solidity source and public chain state were reviewed for the stated ownership, fee, supply, liquidity, mint, pause, blacklist, and transfer-control claims; this was not a complete formal smart-contract audit and is not a guarantee against every defect.
- The legal identity of the project operator, authorization by any Masonic governing body, and private communications or records were not independently verified.
- Public sandbox and threat-intelligence coverage is incomplete. Authentication-only and unavailable sources were not treated as clean, and absence from public indexes does not prove every URL or future state safe.
- The result applies to the current observed deployment and public claims; content, contract interactions, linked destinations, and market conditions can change after publication.
Help protect others by sharing this page on social media! The more people who know about gaducoin.com, the fewer chances they have to deceive someone else. Help others evaluate gaducoin.com by sharing this page on social media!