dege[.]life

The domain dege.life is currently classified as a high‑risk generic phishing site. It was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and remains active as of the report date, July 12, 2026. The domain resolves to the Cloudflare‑provided address 172.67.134.99 and is served from the AS13335 network operated by Cloudflare, Inc. Infrastructure analysis shows the domain is delegated to the Cloudflare name servers elsa.ns.cloudflare.com and devin.ns.cloudflare.com, indicating the use of Cloudflare’s CDN and DNS services. The web server negotiates HTTP/3 connections and presents an SSL certificate issued by Google Trust Services under the WE1 designation, which provides standard TLS encryption but does not mitigate the phishing intent. The Gridinsoft trust score of 0 out of 100 further reflects a lack of reputable reputation. Web‑level observation returns an HTTP 403 response and a page title that reads “Just a moment…”, a pattern commonly employed to delay or obscure malicious content while the browser waits for a Cloudflare challenge. VirusTotal analysis reports a single security vendor flagging the domain out of 95 scanned, suggesting limited detection coverage but confirming at least one independent detection. The domain is listed on one public blocklist and has been explicitly blocked by the PhishDestroy service. Defenders should treat dege.life as malicious and enforce blocking at perimeter firewalls, DNS resolvers, and endpoint protection suites. Continuous monitoring of Cloudflare‑hosted IP ranges for similar newly created domains is advisable, as the infrastructure can be rapidly provisioned for phishing campaigns. Updating URL filtering rules to include the domain and its associated IP address will mitigate exposure, and incident response teams should investigate any credential submissions that reference the domain.