degensentinels[.]xyz

This domain, degensentinels.xyz, is flagged as a generic phishing threat targeting cryptocurrency and NFT users. Analysis indicates the site masquerades as a legitimate NFT project under the name 'Degen Sentinels,' likely designed to harvest wallet credentials or private keys through deceptive login prompts or fake minting pages. No specific drainer kit signatures have been confirmed, but the infrastructure aligns with common phishing tactics observed in the Web3 ecosystem. Infrastructure analysis reveals multiple technical indicators of compromise. The domain resolves to IP address 216.198.79.1 and was registered through NameCheap, Inc. on February 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. It holds a VirusTotal detection score of 4/95 from security vendors, appears on one active security blocklist, and is assigned a trust score of 0/100. The site uses a Let's Encrypt SSL certificate and employs Vercel hosting with HSTS enabled, which may be leveraged to lend false legitimacy to the phishing page. As of the latest assessment, degensentinels.xyz has been taken offline, likely following intervention by security response teams. The domain is currently blocked by at least one major threat intelligence feed. Despite its offline status, residual risk remains due to potential DNS cache persistence, re-registration, or migration to new infrastructure. Users who interacted with the domain are advised to revoke any connected wallet permissions, rotate credentials, and monitor for unauthorized transactions. Organizations should update blocklists to include the domain and associated IP to prevent re-exposure.