# degen.vu — SUSPICIOUS

> degen.vu is under investigation for phishing risks. Newly created domain, exercise caution when interacting with this site.

## Summary
PhishDestroy identifies degen.vu as an active phishing campaign under investigation. The domain is flagged due to suspicious activity despite no current detection by security vendors.

The domain was registered on March 18, 2026, through Sav.com LLC and resolves to IP 172.67.167.239. VirusTotal shows zero detections, which suggests the campaign is in early stages or evading current filters.

Users should remain cautious and avoid sharing sensitive information on degen.vu. PhishDestroy recommends monitoring updates and using security tools to block potentially harmful interactions with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registered: 2026-03-18 14:21:04
- Registrar: Sav.com LLC
- IP: 172.67.167.239
- Nameservers: carrera.ns.cloudflare.com nikon.ns.cloudflare.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/HL8BWdrY/aa10b2a2a516.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7d39cb5e-e04d-404f-91a5-e470f8a30f1d
- PhishDestroy: https://phishdestroy.io/domain/degen.vu/
- LLM endpoint: https://phishdestroy.io/domain/degen.vu/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/degen.vu/
Last updated: 2026-03-19