dexbank.io
“Coming soon”
Evidence Summary
PhishDestroy first observed dexbank.io on Aug 23, 2026. The captured page title is “Coming soon”. Current evidence score: 100/100 (critical).
Positive findings are stored from 4 sources: VirusTotal, ScamSniffer, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 16 detections among 90 engines: alphaMountain.ai, BitDefender, CRDF, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Netcraft, SOCRadar, Sophos, VIPRE, Webroot on Sep 5, 2026 at 03:08 UTC. ScamSniffer listed the hostname in the separate external-blocklist snapshot on Sep 19, 2026 at 10:20 UTC. Spamhaus DBL: DBL_SPAM on Aug 27, 2026 at 22:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 29, 2026 at 01:06 UTC. Google Safe Browsing returned no flag on Aug 29, 2026 at 01:05 UTC.
HTTP 200 was recorded on Sep 19, 2026 at 01:18 UTC. At collection time, the hostname resolved to 104.21.29.80 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. TLS metadata lists Google Trust Services as the certificate issuer with validity through Nov 13, 2026; checked Aug 29, 2026 at 01:02 UTC.
The content indicators and 4 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
Network Security Intelligence
Forensic History & Detection Timeline
-
Domain Status Transition Aug 29, 2026 · 00:15 UTCDomain state transitioned from dead to alive.
-
VirusTotal Detections Update Aug 28, 2026 · 00:58 UTCVirusTotal scanner detections updated from 9 to 13. Added scanner alerts: BitDefender, G-Data, SOCRadar, Sophos.
-
VirusTotal Detections Update Aug 28, 2026 · 00:20 UTCVirusTotal scanner detections updated from 8 to 9. Added scanner alerts: CRDF.
-
Domain Status Transition Aug 28, 2026 · 00:00 UTCDomain state transitioned from alive to dead.
-
Threat First Observed Aug 27, 2026 · 21:03 UTCDomain ingestion complete. Initial state is marked as alive.
Threat Response Pipeline
Public Blocklist Status
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: parked: raw=parked; http=200; via=https_proxy; server=cloudflare
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
Technologies · 3 identified
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of dexbank.io · checked Aug 29, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive