Security Review

Is allocation-fugabelab.xyz legit or a scam?

Our verdict:Dangerous· 13/100

A malicious crypto drainer site impersonating the DEGEN token project to steal assets through fake airdrop claims and high-pressure countdown timers.

allocation-fugabelab.xyzScanned 1h ago
0
Trust score
DANGEROUS
Heuristics 31·MT 5
Category tags
crypto fraudphishing#airdrop drainer#crypto drainer#clone site#coinbase pay phish95% MT confidence
Technical red flags (3)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

Wallet-drainer patterns detected

This page uses language and API references consistent with modern crypto wallet-drainer kits. If you connected your wallet or signed a transaction on this site, assume your wallet is compromised — revoke approvals, move funds to a fresh wallet with a new seed phrase, and treat the original as burned.

  • ·"Connect wallet" paired with a high-urgency action ("claim", "migrate", "revalidate", "verify", "sync").
  • ·WalletConnect prompt surfaced alongside an airdrop / giveaway claim.
View density

Analysis Summary

Threat Intelligence
2/92
Engines flagged this URL
Domain Age
3 months old
Registered Mar 23, 2026
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Brand impersonation — not the real site

2 of 92 antivirus engines flag this page. This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Website Preview

Screenshot of allocation-fugabelab.xyz
LIVE RENDER
allocation-fugabelab.xyz

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust5/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The site is a confirmed clone of the legitimate degen.tips domain, designed specifically to harvest cryptocurrency assets. Our analysis identified multiple high-risk signals, including the use of artificial urgency through countdown timers and fake 'live' viewer counts. Security engines including alphaMountain.ai and Forcepoint ThreatSeeker have flagged the domain as suspicious. The page explicitly impersonates Coinbase and MetaMask to gain user trust before attempting to trigger a wallet-draining transaction. Furthermore, the domain follows a known naming pattern used by a cluster of identified phishing sites.
Full dossier
Analysis complete

Page Content

The site uses a sophisticated template that mimics a legitimate Web3 minting event for the DEGEN meme token. It features a fake 'Mint Party' interface with a countdown timer and a live counter claiming thousands of people are watching. The primary call to action is a 'Connect Wallet' button that triggers a script designed to check wallet balances and request permissions to transfer tokens.

Infrastructure

The domain is hosted on an IP address shared with several other low-reputation sites. While it uses a valid SSL certificate from Let's Encrypt, this is a common tactic for malicious sites to appear secure. The technical setup includes JavaScript bundles that specifically target browser extensions like MetaMask and Coinbase Wallet.

Domain History

Registered only 92 days ago, the domain lacks any long-term reputation or business history. It was registered through PDR Ltd. with privacy protection enabled to hide the operator's identity. This short lifespan and the use of a .xyz TLD are characteristic of disposable infrastructure used in crypto-draining campaigns.

Web Reputation

Independent security researchers have blacklisted this domain and its variants. It has a near-zero trust score across multiple security databases. There is no organic discussion of this specific URL on social media or community forums, which is highly unusual for a token project claiming to have thousands of active participants.
Risk Factors
7
  • Confirmed clone of the legitimate degen.tips website.
  • Uses high-pressure countdown timers and fake 'live' viewer counts to induce panic.
  • Impersonates major brands including Coinbase and MetaMask.
  • Identified as a crypto drainer by multiple security vendors.
  • Domain follows a naming pattern linked to previously flagged phishing sites.
  • No verifiable business registration or contact information provided.
  • Requests wallet permissions under the guise of a 'free' airdrop.
Positive Signals
1
  • The site uses a valid SSL certificate.
AI Recommendation
Do not connect your cryptocurrency wallet to this site or approve any transaction requests. If you have already connected your wallet, immediately use a token approval revocation tool to cancel any permissions granted to this site.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for allocation-fugabelab.xyz, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
3 months
Registered Mar 2026
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones degen.tips
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain allocation-fugabelab.xyz shares naming pattern with known malicious fugabelab.xyz and boost-fugabelab.xyz, both flagged as phishing/crypto drainer sites by PhishDestroy (90/100 risk, 6+ vendors) and Gridinsoft (1/100 trust score).
  • fugabelab.xyz and variants registered March 2026 (approx. 3 months old at time of checks), using privacy protection; part of larger cluster of suspicious domains on shared infrastructure.
  • Page promotes "DEGEN — Mint Party LIVE" impersonating the popular Base meme coin DEGEN (official: degen.tips), which has over 1M holders and real airdrops.
  • Detected scam tactics include countdown/urgency (per input) and wallet checker/drainer patterns common in Coinbase and crypto impersonation attacks.
  • Listed in PhishDestroy blocklists alongside many other .xyz phishing domains; no legitimate business presence or positive reviews found.
  • IP neighbors include numerous low-reputation and flagged domains (americansmbfunding.com, animezn.com, etc.).
  • No mentions on Trustpilot, ScamAdviser, or Reddit; absence of any organic discussion indicates low visibility typical of short-lived scam pages.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • PhishDestroyopen

    "PhishDestroy identifies the domain fugabelab[.]xyz as an active generic phishing site currently posing as a login portal to harvest user credentials."

  • PhishDestroyopen

    "PhishDestroy identifies boost-fugabelab[.]xyz as a crypto drainer scam, currently offline, which impersonates a wallet checker, specifically targeting cryptocurrency users."

  • Gridinsoftopen

    "Multiple security vendors blacklist Fugabelab.xyz, and our checks show a 1/100 trust score. Avoid entering personal or payment data."

Impersonation / typosquat
Clone of degen.tips

Page title "DEGEN — Mint Party LIVE" and description reference the legitimate DEGEN meme coin on Base (official site degen.tips). Uses urgency/countdown tactics typical of fake mint/airdrop pages to lure wallet connections.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research found multiple scam reports from security outlets like PhishDestroy and Gridinsoft, which classify this domain as a crypto drainer and phishing portal. These reports indicate that the site is part of a larger network of .xyz domains used to harvest credentials and drain wallets. No legitimate business registration was found, and the site has a trust score of 1/100 on independent review aggregators.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

High correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (2)
  • Evidence confirms this site is a clone of degen.tips.
  • Zero contact info on a crypto/gambling page — legitimate operators publish a licence and address.
Linked signals (2)
Clone of degen.tipsPattern · Contactless Crypto

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious2Suspicious58Harmless92Engines
0
of 92
alphaMountain.ai
Suspicious· suspicious
Forcepoint ThreatSeeker
Suspicious· suspicious

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles2
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Countdown timer or 'limited time' urgency pressure detected.
  • Page impersonates Coinbase on a non-official domain.
  • Scam family match: Countdown / Urgency.
  • Links to 2 social profiles.

Domain & Encryption

Domain History
Age3 months old
RegistrarPDR Ltd. d/b/a PublicDomainRegistry.com
RegisteredMar 23, 2026
ExpiresMar 23, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · E7
ExpiresAug 19, 2026 (56d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://allocation-fugabelab.xyz/
  • 2200https://allocation-fugabelab.xyz/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
High likelihood
75/100
  • Page claims to be Coinbase.
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Crypto Fraud
Moderate likelihood
53/100
  • AI analyst tagged this as crypto fraud / wallet-drainer.
  • AI analyst tagged this as an airdrop / drainer.
  • AI analyst categorised the site as crypto-themed.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

  • Do not interact with allocation-fugabelab.xyz

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags allocation-fugabelab.xyz as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — allocation-fugabelab.xyz scored 13/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. allocation-fugabelab.xyz presents a valid TLSv1.3 certificate issued by Let's Encrypt · E7, expiring in 56 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • allocation-fugabelab.xyz is 3 months old, registered on 3/23/2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 2 out of 92 antivirus engines in our malware network flagged allocation-fugabelab.xyz as malicious or suspicious. Even one detection is a meaningful signal.
  • No. allocation-fugabelab.xyz is not currently listed on the major browser blocklist feeds that modern browsers use.
  • allocation-fugabelab.xyz resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 23, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around allocation-fugabelab.xyz have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·allocation-fugabelab.xyz
DANGEROUS

This is a malicious crypto drainer site impersonating the DEGEN token project to steal wallet assets. It uses fake airdrop claims and high-pressure countdown timers to trick users into connecting their wallets. Do not interact with this page or approve any transactions.

Do not connect your cryptocurrency wallet to this site or approve any transaction requests. If you have already connected your wallet, immediately use a token approval revocation tool to cancel any permissions granted to this site.

AV engines
92
MT passes
2
Net signals
2
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.