degen-safe-v2[.]vercel[.]app

The domain degen-safe-v2.vercel.app has been identified as an active high-risk phishing site engaged in credential theft. It masquerades under the title 'Degen Safe,' suggesting a cryptocurrency-related theme, potentially targeting users for their sensitive information. No specific drainer kit is associated, but the branding implies a focus on crypto security, possibly to lure cryptocurrency holders.

Technical evidence points to degen-safe-v2.vercel.app being a significant threat. Registered via Vercel Inc., this domain was created on April 04, 2026, which is unusual since the date is post-2023, indicating a potential error or anticipation event. It resolves to IP 64.29.17.195 in the US, tied to Vercel, Inc. VirusTotal analysis reveals 2 out of 95 security vendors flag the site. It is further reinforced by its appearance on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services / WR1, which is not inherently suspicious but raises flags when combined with its blocklist status.

Currently, the domain remains active and poses a significant risk to unwary users. While it's blocked by major security entities, the potential for credential theft remains high if users access the site before protections like these are in place. Immediate response actions involve advising users to avoid the domain and ensuring automated defenses are updated to recognize and block access. The persistence of this threat underscores the need for continuous vigilance and user education on recognizing such phishing tactics.