event-degencoin[.]fun

This domain is flagged as an elevated-risk phishing infrastructure specifically designed for airdrop scams targeting cryptocurrency users. Analysis indicates the domain impersonates legitimate DEGEN token distribution events, luring victims with false claims of free token allocations to harvest wallet credentials or deploy malicious smart contracts. The threat type is classified as brand impersonation with financial fraud intent, focusing on cryptocurrency theft through social engineering tactics. Infrastructure analysis reveals the domain event-degencoin.fun was registered on May 22, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.21.82.221 and employs Cloudflare services, including HSTS and HTTP/3 protocols, alongside Cloudflare Browser Insights for performance tracking. Security vendor assessments show 5 out of 95 detection engines on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. The page title, 'DEGEN | Airdrop,' directly correlates with the scam's deceptive branding. Mitigation against this threat requires immediate domain blocking at the network and endpoint levels. Organizations should update security policies to include this domain in web filtering rules and endpoint protection signatures. Cryptocurrency users should be educated to verify airdrop legitimacy through official project channels only, avoiding interaction with unsolicited token distribution claims. Wallet providers are advised to integrate real-time phishing detection to prevent credential harvesting from similar scam domains. Given the domain's current offline status, continuous monitoring for re-emergence or associated infrastructure is recommended.