degenstaking[.]vercel[.]app

degenstaking.vercel.app was flagged as a crypto drainer impersonating decentralized finance staking services. The domain mimics legitimate “degen” staking interfaces to trick users into connecting Web3 wallets and signing malicious transactions that drain tokens via permit2 or similar ERC-20 approval exploits. No known drainer kit fingerprint has been publicly released, but the site’s front end reuses phrasing from popular DeFi dashboards and includes fake “staking rewards” calculators to harvest wallet signatures.

Technical indicators place the domain at high risk: VirusTotal shows 0 detections out of 95 engines as of seed b66a18, the SSL certificate is issued by Google Trust Services, the registrar is Vercel Inc. via a free Vercel.app subdomain, and the site resolves to IP 64.29.17.131. It has been detected on two independent blocklists and is already blocked by MetaMask and SEAL, indicating early-stage but confirmed malicious behavior despite low AV coverage.

The threat remains active and under investigation; the domain continues to resolve and serve its drainer interface. Users should avoid visiting degenstaking.vercel.app and immediately revoke any wallet approvals granted to this domain via tools like revoke.cash. Remaining risk is elevated due to the lack of AV detection and the use of a reputable hosting provider (Vercel) which may prolong its availability until manual intervention occurs.