deficmcm[.]com

deficmcm.com is actively hosting a crypto drainer operation as indicated by its classification as a crypto scam and the page title "DeFi." The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑protected IP address 188.114.96.3, located in the United States under ASN 13335. HTTP requests receive a 200 status and the site serves content over TLS with a Google Trust Services certificate, confirming proper SSL deployment. Infrastructure analysis shows the use of Cloudflare services, including HTTP/3, and the presence of a Facebook Pixel, suggesting tracking capabilities. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, two security blocklists flag the domain, and it is listed by PhishDestroy and ScamSniffer. VirusTotal reports 2 of 93 scanners marking the domain as malicious, reinforcing the threat assessment. While the site’s visual content has not been examined, the observable indicators—registration details, hosting under a known CDN, low trust scores, and multiple blocklist entries—support a high‑risk classification. Defenders should block the domain at network perimeter, monitor outbound connections to the associated IP, and add the domain to internal threat intel feeds. Continuous re‑scanning is recommended to capture any changes in detection ratios or additional malicious activity.