Is homyhood.com a scam? TrustSniffer's high-risk assessment: 15/100

Overview

This website, homyhood.com, is a recently registered domain whose homepage presented almost no readable content when captured. The page showed only a short bot-challenge screen titled "Cloudflare Registrar", with no visible products, services, pricing, or operator details. Its apparent purpose and business model cannot be determined from what it exposes to a visitor.

Scam/Impersonation Risk

Contradictory signals are present. The domain is on an external blacklist, which is a confirmed negative. The reputation data also records one malicious and two suspicious detections from security engines, and a prior phishing association. No brand impersonation or conflicting legal identities were observed, and the sandbox recorded no wallet-draining, clipboard-hijacking, hidden-form or credential-exfiltration behaviour. That limits what can be attributed, but it does not offset the blacklist. The current registration is very new. Archive captures from several years earlier suggest the name was used before and re-registered, so the earlier history should not be read as continuity of a single operator. Sandbox behaviour adds friction. During interaction the page changed its structure extensively, and almost all of its network traffic went to third-party hosts, including many background data requests and several outbound submissions. Because the homepage is gated, these patterns cannot be tied to any stated function. Together they fit a thin front page that loads content dynamically from elsewhere. That pattern is common to both ordinary placeholder sites and abusive ones. Evidence:

• Homepage: a challenge page of very short text titled "Cloudflare Registrar", with no product, company or contact content.
• Domain registered 2026-09-06 (~46 days old, 0.13 years) through Cloudflare, Inc. as registrar.
• Web archive: 4 snapshots spanning 2021–2024 (4 years tracked, about one per year, with a gap of up to 3 years), suggesting an earlier lifecycle that predates the current registration.
• Sandbox, 3 of 3 runs: 82 external background requests and 6 external submissions, with about 98% of traffic going to external hosts. The page changed 4,028 DOM mutations after interaction.

Regulatory Verification Notes

The site exposes no legal, terms, privacy, about or licensing pages, so there is no company name, registration number, regulator reference or physical address to evaluate. Because the content is gated, this is not evidence of a licensing breach. It means no regulatory standing can be assumed, and none was matched in third-party broker datasets. The absence of a licensing disclosure is a verification gap and not, by itself, a sign of fraud. The blacklist hit and detections described above are the reason for the cautionary posture. Evidence:

• Homepage: no identifiable legal entity, licence, or registration reference was present in the captured content.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-05 with 43 days remaining. A DV certificate confirms control of the domain, not the operator's identity.
• No match in third-party broker reputation records.

What to Verify Next

Before any engagement, confirm the operator's legal identity and any claimed authorisation through official public registers, not through details supplied on the site. Check whether the domain appears on the clean-up or removal lists of the blacklist that flagged it, and re-test after a reasonable interval to see whether the listing persists. Any contact channels should be confirmed through an independent, offline route. If the site is later linked to a regulated service, confirm that status directly with the relevant regulator. Evidence:

• Homepage: no operator, jurisdiction or licence information is available to check against registers.
• Blacklist status: a current external listing is confirmed and should be re-checked over time.
• Domain history: the 2021–2024 captures and the 2026 registration should be reconciled against whoever claims to run the site.

Summary Verdict

The overall posture is high-risk and clearly cautionary. The confirmed blacklisting and the supporting threat detections outweigh the technically sound transport security and the absence of observed credential-theft mechanics. The operator's real-world identity remains unverified, and the very short registration history gives no track record to counterbalance the negative reputation.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are CDN edge servers, so the origin host could not be seen. This is a mitigating factor only. It adds bot filtering and a valid TLS certificate from a known issuer, but it prevents independent hosting verification and can mask rapid content swaps. It offsets neither the blacklist nor the detections.

Closing Assessment

Treat the site as read-only at most. Do not log in, enter credentials, connect wallets, or make payments or other financial transfers. Anyone who has already interacted with it should change reused passwords and monitor related accounts.