en-dbnk[.]com

PhishDestroy identifies en-dbnk.com as a suspicious crypto drainer impersonating legitimate banking interfaces to siphon cryptocurrency from unwary users. The domain leverages deceptive double-www obfuscation (www.www.en-dbnk.com) to mimic trustworthy URLs, a common tactic to bypass initial scrutiny. Upon resolution, the site maps to IP 104.21.91.181, a server associated with transient malicious infrastructure rather than stable financial services. This domain was flagged with zero detections on VirusTotal out of 95 engines, indicating either novel deployment or evasive configuration. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on October 22, 2025, the domain is less than 48 hours old at time of assessment, minimizing historical blocklist exposure. The presence of a Google Trust Services SSL certificate does not validate legitimacy, as threat actors routinely abuse trusted issuers to lend false credibility to phishing fronts. Users who visited en-dbnk.com should immediately disconnect any active wallet connections or browser sessions, scan devices for unauthorized extensions or malware, and revoke any permissions granted to the site. Do not interact with prompts to connect wallets or enter seed phrases. Report the domain to your browser’s safe browsing program and consider rotating wallet addresses if exposure occurred. Monitor transaction histories for anomalous outflows and enable multi-factor authentication on all financial accounts as a precaution.