degen-labs[.]netlify[.]app

The domain degen-labs.netlify.app was a generic phishing site posing an elevated risk of credential theft or social engineering attacks. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, degen-labs.netlify.app has been taken offline, though prior activity classified it as a phishing threat.

Technical analysis shows degen-labs.netlify.app was flagged by 1 of 95 VirusTotal security vendors, including Google Safe Browsing, which labeled it for 'Social engineering'. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Netlify. It resolved to the IP address 63.176.8.218, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. The SSL certificate was issued by DigiCert Inc under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain. No creation date was available, and the observed page title was 'Site not found', returning an HTTP 404 status. Technologies detected included Netlify and HSTS enforcement.

Users who may have interacted with degen-labs.netlify.app should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or identity fraud. If financial or crypto assets were exposed, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to Google Safe Browsing, Netlify’s abuse team, and local cybercrime authorities to aid in takedown efforts and prevent further victimization.