debnk[.]com-wallet-safe[.]com

Analysis of debnk.com-wallet-safe.com indicates a confirmed crypto drainer operation, currently offline as of July 23, 2026. The domain was registered on February 21, 2026, through Web Commerce Communications Limited, a registrar frequently associated with fraudulent infrastructure. It resolves to IP 104.21.79.76, hosted on Cloudflare's network (AS13335), a common tactic to obscure origin servers and evade takedowns. The domain employs Cloudflare nameservers (mckinley.ns.cloudflare.com, nico.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which does not validate legitimacy due to automated issuance.

Detection data reveals elevated risk: the domain appears on two security blocklists, and seven of 93 security vendors on VirusTotal flag it as malicious. PhishDestroy and ScamSniffer have explicitly blocked the domain, aligning with its classification as a crypto scam. The Gridinsoft trust score of 0/100 further corroborates its fraudulent nature. The HTTP response returns a 'Page Not Found' title, suggesting either a takedown, evasion tactic, or incomplete deployment at the time of assessment.

Defenders should treat this domain as compromised infrastructure. While the site is offline, historical associations with crypto drainers warrant monitoring for re-emergence under similar naming conventions or Cloudflare-hosted IPs. Network-level blocking of 104.21.79.76 and alerting on related SSL certificates (Google Trust Services WE1) may mitigate residual risk. No brand impersonation is confirmed in the available data, though the domain structure implies targeting of cryptocurrency wallet users.