debank[.]com-connect-api-appv3[.]com

The domain debank.com-connect-api-appv3.com was registered on February 21 2026 and is currently listed as offline. It is classified as a brand impersonation targeting the DeBank brand, as indicated by the page title that mirrors the target brand name. The site has been flagged by multiple security resources: PhishDestroy and ScamSniffer have added it to their blocklists, and it appears on two additional security blocklists. VirusTotal analysis shows that 7 of 95 scanned security vendors flagged the domain, reinforcing the malicious assessment.

Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of trustworthiness. No public information is available regarding its hosting infrastructure, IP address, ASN, geographic location, or SSL certificate, and Safe Browsing status is not reported. The limited data suggests the domain was used for brand impersonation, likely to lure DeBank users to submit credentials or other sensitive data.

Defenders should ensure the domain is added to network deny lists, DNS filtering, and email security gateways. Continuous monitoring for any resurrection or similar patterns in newly registered domains that reuse the DeBank naming convention is advised. Because the site is offline, active takedown appears successful, but threat actors may repurpose the naming convention, so proactive detection rules should be implemented.