degen-royale[.]gitbook[.]io

The domain degen-royale.gitbook.io was identified as a phishing site engaging in brand impersonation targeting the Base cryptocurrency platform. It posed as a legitimate project associated with Base to deceive users, though no crypto drainer kit was detected. As of the latest verification, degen-royale.gitbook.io has been taken offline, but users who interacted with it should remain cautious.

Technical analysis shows degen-royale.gitbook.io was flagged by 1 of 95 VirusTotal security vendors, specifically ChainPatrol. Google Safe Browsing did not flag the domain, but it appeared on 1 security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc. on March 30, 2014, and resolved to the IP address 104.18.40.47, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Overview of Degen Royale | Degen Royale'. The site used Cloudflare technologies and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who visited degen-royale.gitbook.io should monitor their accounts for unauthorized activity, particularly if they entered credentials or connected wallets. If wallet interactions occurred, revoke any token approvals and consider transferring funds to a new wallet. Change passwords for any accounts accessed via the site and enable two-factor authentication (2FA) where possible. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Base) to aid in takedown efforts.