degenbank[.]vercel[.]app

This domain is flagged as a high-risk phishing site designed to mimic a legitimate banking service. Analysis indicates it targets users by presenting a fraudulent login interface under the name 'Degen Bank,' likely harvesting credentials for unauthorized account access or financial fraud. The site poses a direct threat to individuals who may unknowingly enter sensitive banking details, including usernames, passwords, or multi-factor authentication codes. Infrastructure analysis reveals multiple technical indicators confirming its malicious nature. The domain was registered on February 21, 2026, through Tucows Domains Inc., an unusual timeline suggesting potential domain spoofing or pre-registration for deceptive purposes. It resolves to the IP address 64.29.17.195, hosted on Amazon Web Services (AS16509), and is flagged by 3 out of 95 security vendors on VirusTotal. Additionally, it appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate, issued by Google Trust Services (WR1), is often abused by threat actors to create a false sense of security. If a user has visited degenbank.vercel.app or entered any credentials, immediate action is required. First, cease all interaction with the site and disconnect the device from the network to prevent potential data exfiltration. Reset passwords for any accounts accessed while the site was open, prioritizing banking, email, and financial services. Enable multi-factor authentication if not already active, using app-based or hardware tokens instead of SMS. Monitor linked accounts for unauthorized transactions or login attempts, and report suspicious activity to the respective financial institution. Consider scanning the device for malware, as phishing sites may deploy additional payloads. Finally, report the domain to relevant cybersecurity authorities or anti-phishing initiatives to aid in takedown efforts.