app-v2debank[.]com

The domain app-v2debank.com has been identified as a banking phishing threat specifically targeting users of the DeBank platform. As of the latest assessment, the domain has been taken offline, though prior activity indicates malicious intent to harvest credentials or financial data. Analysis confirms this domain was designed to impersonate legitimate DeBank services, a decentralized finance (DeFi) analytics and portfolio tracking platform. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 28, 2026, and resolved to the IP address 188.114.97.3. Despite its recent creation, the domain appeared on three security blocklists and was actively blocked by multiple security mechanisms, including MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Google Trust Services, and the site utilized Cloudflare with HTTP/3 support. Notably, VirusTotal reported 0 detections out of 95 vendors, suggesting either evasion techniques or delayed detection. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its high-risk classification. The page title, www.www.app-v2debank.com, further indicates an attempt to mimic legitimate subdomain structures while introducing irregularities. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to monitor for unauthorized access attempts linked to this domain, particularly within DeFi-related accounts. Network administrators should ensure blocklist updates include this domain and its associated IP address. Users who accessed the site should immediately rotate credentials for any financial or DeFi platforms, enable multi-factor authentication, and review transaction histories for anomalies. Proactive threat hunting for related indicators of compromise, such as the IP 188.114.97.3 or SSL certificate fingerprints, is recommended to identify potential lateral movement or persistence mechanisms.