degen-duel-docs[.]gitbook[.]io

Analysis of the domain degen-duel-docs.gitbook.io indicates it is an active brand impersonation scam targeting x.com, as of July 22, 2026. The domain resolves to IP address 172.64.147.209, which is hosted on Cloudflare's infrastructure (AS13335) in the United States. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 21, 2026, and uses Cloudflare nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. The site presents an HTTP 307 status code and employs an SSL certificate issued by Google Trust Services (WE1), with detected technologies including Cloudflare and HTTP/3.

Detection data shows limited but concerning signals: two of 93 security vendors on VirusTotal flag the domain, and it appears on one security blocklist, with PhishDestroy currently blocking it. The Gridinsoft trust score is 0 out of 100, reinforcing the high-risk classification. The page title, 'Degen Duel Paper | Degen Duel Docs,' does not explicitly confirm the scam mechanism, but the known scam type is brand impersonation of x.com, aligning with the threat classification.

Defenders should treat this domain as malicious. The combination of brand impersonation targeting a major platform, low detection but active blocklisting, and Cloudflare-hosted infrastructure with no legitimate affiliation to the impersonated brand supports immediate blocking. Further investigation into the content and redirection behavior is recommended, though the domain remains active and unremediated as of the report date.