Is degenpad.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

degenpad.app is a recently registered web-application domain whose public content could not be inspected. Its edge provider answered automated access with a security interstitial titled as a suspected-phishing warning instead of the site's own pages. No products, services or business model could be confirmed from the site, so its purpose is unestablished. The domain name suggests a crypto-oriented platform, but nothing observed confirms that.

Scam/Impersonation Risk

This is the decisive area of the assessment. Contradictory signals are present. The domain is currently blacklisted by external threat intelligence. A multi-engine reputation scan returned a substantial number of malicious verdicts plus further suspicious ones, and several tier-one security vendors are among the engines that flagged it. Web-archive intelligence also carries a prior phishing association for the domain. The reputation signals are strong enough to override every mitigating factor. Behavioral testing of the live site showed heavy dependence on external network calls, including multiple third-party POST submissions. Page structure changed substantially after interaction, and the console logged repeated script errors. Those external destinations were all on a recognised-service list. No wallet-connection prompts, wallet-drainer routines, clipboard manipulation, hidden forms or external password forms were detected in the sessions that ran. That absence lowers the likelihood of a drainer-style attack but does not offset the external detections. No conflicting legal identities or confirmed brand impersonation were observed, so the risk rests on the blacklisting and phishing associations alone. Evidence:

• Multi-engine reputation scan: 12 engines malicious and 4 suspicious, with three tier-one security vendors among them.
• Behavioral sessions: 64 external XHR/fetch calls and 9 external POST submissions, all to recognised services, with 25 console errors and 1,523 DOM mutations after interaction.
• Behavioral sessions: no wallet-connect, drainer, clipboard-hijack or hidden-form activity across 3 successful runs.
• Homepage: the edge-provider interstitial itself warned of suspected phishing.

Regulatory Verification Notes

No licence, registration or regulated-entity status could be linked to this domain, and no third-party broker-reputation record matched it. That absence is not a signal either way. The registration record does not identify a registrant, which is ownership opacity. It is not an identity contradiction, and it matters here only because it removes any accountable party who could answer the reputation findings. The registration chronology is also inconsistent. The domain's registration record is far newer than the archived history, which begins earlier. This is consistent with a re-registration or a change of control. The records alone do not show which occurred. The encrypted-transport setup is valid but domain-validated only, so it shows control of the domain and says nothing about the operator's identity. Evidence:

• Registration record: created 2026-07-29 (~0.24 years old), expiring 2027-07-29, via NICENIC INTERNATIONAL GROUP CO., LIMITED, with no registrant identified.
• Web archive: 37 snapshots spanning 2023-03-14 to 2025-12-10 (3 years tracked), predating the current registration date.
• Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-25.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any project or brand the domain claims to represent should be confirmed through its independently known official channels, such as a previously established website, verified social accounts or official documentation. Links reached via this domain should not be used for that check. If the site later presents financial, trading or token-sale functionality, the claimed operator should be checked against the relevant financial-regulator registry before any engagement. The domain should be re-assessed once the external detections are cleared or explained by the owner. Without such a change, the standing of the site does not improve. Evidence:

• Reputation findings: the current detections remain unresolved.
• Registration record: no named operator to match against a registry.
• Archive history: changed registration chronology that warrants an explanation from the operator.

Summary Verdict

The site sits in a clearly elevated-risk posture. Convergent threat-intelligence detections, a phishing association and the absence of any verifiable operator outweigh its technically orderly setup. Legitimacy is not supported by the available evidence, and the real-world operator remains unidentified.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge servers. No origin server was observable, which prevents independent hosting verification. The edge also applies bot-challenge protection. These protections are mitigating only. They show competent infrastructure but cannot offset the reputation risk, and they can mask rapid changes in what is served.

Closing Assessment

Account logins, credential entry, wallet connections and any financial interaction should be avoided entirely. If the site must be viewed, it should be viewed read-only from an isolated, non-production environment. Any prompt to connect a wallet or sign a transaction should be refused.