de-gen[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Chainlink, a decentralized oracle network. The site mimics official Chainlink branding to deceive users into interacting with malicious content, likely aimed at credential theft or unauthorized transactions. Analysis indicates the domain remains operational despite limited detection coverage. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. and resolves to IP 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) in the US. The SSL certificate is issued by Google Trust Services (WR1). Security telemetry shows the domain appears on one blocklist (PhishDestroy) and is flagged by Google Safe Browsing as phishing, though VirusTotal reports 0/95 detections. The page title, 'DeGen,' may attempt to exploit trending crypto community terminology to appear legitimate. Mitigation requires immediate blocking of the domain and associated IP at network and endpoint levels. Users should verify all Chainlink-related communications via official channels, particularly those involving wallet connections or token transfers. Organizations should monitor for unauthorized access attempts linked to this domain and educate users on identifying brand impersonation tactics, such as mismatched URLs or unsolicited requests for sensitive information. Incident response teams should treat any interaction with this domain as a potential compromise indicator.