# deficncn.com — SUSPICIOUS > deficncn.com is linked to crypto-drainer threats and appears on security blocklists. Learn how to protect your digital assets now. ## Summary PhishDestroy identifies deficncn.com as a medium-risk active domain associated with crypto-drainer threats. This type of malicious activity targets cryptocurrency wallets by stealthily extracting digital assets without user consent. Users visiting this domain risk losing funds due to the unauthorized transfer of their crypto holdings. The attack method used by deficncn.com typically involves phishing schemes where users are lured into interacting with a fake or compromised website that mimics legitimate crypto services. Once connected, the site attempts to access private keys, seed phrases, or wallet credentials, enabling attackers to drain crypto assets directly. The domain's presence on multiple security blocklists and detection by several antivirus engines underscores its malicious intent. If you have visited deficncn.com, it is crucial to immediately disconnect any linked wallet and avoid entering sensitive login information. Users should run comprehensive malware scans, change wallet passwords, and consider migrating assets to a new wallet with enhanced security. Staying informed and cautious about suspicious crypto-related domains like deficncn.com is essential to safeguard digital investments. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP 200) - Page title: DeFi ## Domain Intelligence - Registered: 2026-02-21 07:01:08 - Registrar: Gname.com Pte. Ltd. - Nameservers: ["mckinley.ns.cloudflare.com", "yew.ns.cloudflare.com"] ## Detection Status - VirusTotal: 3 vendors flagged Vendors: ["Bfore.Ai PreCrime", "Gridinsoft", "SOCRadar"] - Google Safe Browsing: clean - Blocklists: 2 hits Lists: ["PhishDestroy", "ScamSniffer"] ## Live Page Content ### Page Text loading ### External Scripts - https://connect.facebook.net/en_US/fbevents.js ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/1fb2c340-de2c-4ad2-916a-9ff8c3c4df22 - PhishDestroy: https://phishdestroy.io/domain/deficncn.com/ ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/deficncn.com/ Last updated: 2026-03-14