degen-camp[.]fun

This domain, degen-camp.fun, is identified as a crypto wallet drainer designed to execute unauthorized transactions from connected cryptocurrency wallets. Victims lured to the site may unknowingly sign malicious smart contracts, resulting in the irreversible transfer of digital assets to attacker-controlled addresses. The site employs deceptive interfaces mimicking legitimate wallet or DeFi platforms to trick users into approving transactions. Analysis indicates the domain was registered on March 23, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, an uncommon registrar for legitimate services. It resolves to IP address 188.114.96.3 and is flagged by 14 out of 95 security vendors on VirusTotal. The domain appears on four security blocklists, including MetaMask and ScamSniffer, and uses Cloudflare for hosting and DDoS protection, a common tactic to obscure malicious infrastructure. The SSL certificate is issued by Let's Encrypt, providing a false sense of security. If you visited degen-camp.fun or connected a wallet to the site, immediately revoke all active smart contract approvals using a trusted wallet management tool. Transfer remaining assets to a new, secure wallet and monitor transaction history for unauthorized activity. Reset passwords and enable multi-factor authentication on all related accounts. Report the incident to your wallet provider and relevant blockchain explorers to flag the attacker's addresses. Do not interact with any links or communications associated with this domain.