airdrop-debank[.]info

This report details the technical analysis of airdrop-debank.info, a website that impersonated the DeBank brand and hosted an Airdrop Scam. The site presented a page titled "Nur einen Moment…" to visitors, likely as a pretense to appear legitimate. The threat posed by this site is credential theft and cryptocurrency asset compromise, as typical Airdrop Scams deceive users into connecting their wallets or providing private keys under the guise of claiming a token distribution.

Technical evidence confirms the malicious nature of the site. VirusTotal detected it as malicious by 10 out of 95 vendors. It was flagged by ChainPatrol, alphaMountain.ai, BitDefender, CRDF, and CyRadar. Google Safe Browsing specifically flagged it for SOCIAL_ENGINEERING. The domain was hosted on IP address 2606:4700:3030::6815:4280 in the United States, under AS13335 Cloudflare, Inc. No SSL certificate was detected. The domain used nameservers candy.ns.cloudflare.com and nero.ns.cloudflare.com. The domain is currently offline.

The current status of airdrop-debank.info is down or offline, rendering it inaccessible. The risk level is assessed as high based on the 10/95 VirusTotal detection rate, the Google Safe Browsing flag for social engineering, and low trust scores from GridinSoft (0/100) and ScamAdviser (34/100). The DOM risk score of 25 further supports the classification as a high-risk threat.