Is degenhook.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

The website is a single-page property titled "DEGEN" on the domain degenhook.com. It loads normally and presents roughly two thousand characters of homepage text. The material available does not establish a clear product, service, or business model, so its purpose and operator remain unconfirmed. The domain is very new and is hosted on commodity cloud infrastructure.

Scam/Impersonation Risk

This is the decisive area of the assessment. The domain is blacklisted by external reputation sources. Multi-engine scanning returned one malicious and one suspicious detection against it, and a prior phishing association is recorded for the domain. Page analysis found no brand impersonation and no conflicting legal identities, so the concern rests on external threat reporting, not on a demonstrated impersonation. Separately, the hosting address has accumulated a large volume of abuse reports. These reports are attributed to shared provider infrastructure, so they may partly reflect other tenants. They are not discounted, however, and they reinforce the reputational concern. In controlled behavioral testing the homepage showed no wallet-connection prompts, no clipboard manipulation, no hidden forms, no credential posts to external hosts, and no cloaking. A high share of its traffic goes to third-party hosts, and the page produced a heavy volume of script errors. These are consistent with an unfinished or poorly maintained build. The absence of overt malicious behavior in testing does not offset a confirmed external listing on a domain this new. The site's own substantive claims could not be analysed, because automated page analysis did not complete. Evidence:

• Homepage and domain-level reputation: external reputation scanning shows 1 malicious and 1 suspicious detection, and the domain is flagged on an external blacklist.
• Hosting address: 78 abuse reports from 13 distinct reporters, with the most recent in late October 2026, attributed to shared Google-operated infrastructure.
• Domain provenance: registered 2026-07-31 (~0.24 years, about 86 days old), with registration expiring 2027-07-31.
• Web-archive depth: 1 archive snapshot, with first and last capture on 2026-10-11 (1 year tracked), so there is no historical continuity.
• Homepage behavior: 92 console errors across 3 sandbox runs, 6 external POST requests, and a peak external-request share of 79.4%, with no wallet, clipboard, or hidden-form activity.

Regulatory Verification Notes

The homepage carries no clearly identifiable operator, and the site's disclosure state is unclear. No regulator, license, or third-party registration could be connected to it. No broker-reputation entry matches the domain either, so there is no external regulatory or reputational record to draw on, positive or negative. The real-world operator cannot be linked to any known brand or person, so the site cannot be treated as an established or verified entity. This is a verification gap, and by itself it is not evidence of wrongdoing. Here it compounds the external threat listing instead of standing alone. Evidence:

• Homepage: no recognizable legal entity, license, or registration reference was identified in the captured content.
• Identity assessment: the site could not be independently connected to a real-world organization.
• Hosting infrastructure: served from AS396982 (GOOGLE-CLOUD-PLATFORM, Google LLC, US).
• Transport encryption: TLS certificate issued by YE2 (domain-validated only) and valid to 2027-01-13. Domain validation confirms control of the domain and nothing about the operator. The domain is registered through Name.com, Inc.

What to Verify Next

Any engagement should start with independent confirmation of who operates the site. That means checking whether the operator or project can be found through channels outside the website, such as an official announcement from an established organization that links to this domain. Any claimed license or registration should be checked directly with the relevant regulator's public registry, not through links on the site. The current status of the threat listing should be rechecked directly with the reputation sources before any decision is made. The official support and contact channels should be confirmed through an independent route. Until these checks succeed, the site's content and requests should not be relied on. Evidence:

• Domain age: the domain is only about three months old, so no track record exists for the operator to cite.
• Archive record: a single recent capture offers no earlier content to compare against.
• External listing: the domain-level detections and blacklist entry are current and unresolved in the available data.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary posture. The domain is new, has no operating history, and has no verifiable operator. Current external threat reporting is not outweighed by the absence of overt malicious behavior in testing. A valid certificate and a recognized cloud host establish only that the site is technically operational, not that it is trustworthy.

Infrastructure Integrity

The site is hosted on Google Cloud in the United States from a single resolved address, with no separate CDN or WAF layer detected in front of it. The site is therefore directly exposed on shared provider infrastructure, and that infrastructure provides no meaningful mitigation here. The provider's reputation is also affected by the shared-address abuse reports. Weak DNS heuristics point to a young domain with a small subdomain footprint. These are unconfirmed indicators and are consistent with a very recently launched site.

Closing Assessment

The site should not be used for account login, credential entry, wallet interaction, or any financial or payment activity. At most, it can be viewed passively from an isolated environment, and nothing should be downloaded from it. Reassessment is appropriate only if the external listing is cleared and the operator's identity is independently established.

Signals weighed against the site

• AbuseIPDB: 78 reports on hosting IP 34.111.179.208 (Google LLC, Content Delivery Network), 42% confidence. The reports are attributed to shared infrastructure, not specifically to this website.