ABUSE NOTICE · 24H+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@registrar.eu.
The latest stored availability evidence still shows the domain reachable; 37 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations.
This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
idealldbs.com is a credential‑phishing site that copies the look and feel of DBS IDEAL’s online banking for business customers. It targets corporate account holders by prompting them to enter their login credentials. PhishDestroy first detected the domain on 2026-10-19. The site is still alive as of that date, although its content was unreachable when checked.
How the scam works
The page presents the title “DBS IDEAL Online Banking for Business | Login Resmi”, suggesting a legitimate DBS login portal. Victims are asked to input their username, password and often a one‑time code, which the attackers capture to hijack the account. With those credentials the thieves can log in to the real DBS platform, approve transfers or change contact details, resulting in financial loss.
Evidence
VirusTotal scanned the domain with 92 engines and reported zero detections, indicating the site itself does not host known malware. urlscan.io flagged the page as malicious and identified a genericemail brand indicator. The domain appears on PhishDestroy and OpenPhish blocklists, and five OTX pulses reference it. No other major scanners reported it as unsafe.
Infrastructure
The domain was registered on 2026-10-17 through Hosting Concepts B.V. d/b/a Registrar.eu, only two days before PhishDestroy’s first sighting. It resolves to 63.176.8.218, an Amazon Web Services address in Germany (AS16509). The site uses a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, a common legitimate authority that does not itself indicate malicious intent.
What to do
Anyone who entered a DBS username, password or 2FA code should immediately change those credentials on the real DBS portal and notify DBS of a possible compromise. Enable or reset two‑factor authentication and review recent account activity for unauthorized transactions. Report the phishing page to DBS, your email provider and to PhishDestroy. Security teams should add idealldbs.com to block lists, monitor for outbound connections to its IP, and educate users about fake DBS login pages.
Certificate fingerprintbc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478Certificate names · 1 SANs
netlify.app
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Evidence layersAvailability: Content servingContent: Content served at rootDNS: ResolvedRegistration: Unknown
Latest HTTP observationコンテンツ公開中Ordinary HTTP content served90%2026-10-20 10:10:21 UTC
RDAP registration不明
Observed timelinelast reachable: 2026-10-20 10:10:21 UTClast content: 2026-10-20 10:10:21 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
脅威情報の照合 · source references
ScamAdviserPublic lookup
A public ScamAdviser lookup is available. Review its current score and warnings at the source; the existence of a lookup page is not itself a malicious verdict.
Live-fetched via CF worker proxy pool · cached 24h
Recorded subdomains1
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
www.idealldbs.comDomain record
The original observation time is not recorded for these hostnames.
Google PageSpeed Insights — mobile performance audit of idealldbs.com· checked Oct 19, 2026
100
Good
Performance
FCP
0.77s
First Contentful Paint
LCP
0.77s
Largest Contentful Paint
CLS
0.003
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
0.77s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good50-89 Needs Work0-49 Poor
Stored Capture Evidence 1 snapshot
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
Archived HTTP responseHTTP 200
Requested URL:http://idealldbs.com/
DBS IDEAL Online Banking for Business | Login Resmi
DBS IDEAL adalah solusi perbankan bisnis online yang aman dan mudah digunakan untuk mengelola keuangan perusahaan kapan saja, di mana saja. Login sekarang.
対応 HTTP 200
HTML body 22.9 KB
Compressed 5.8 KB
Links 3 internal · 0 external
Selected response headers
Cache-Control: public,max-age=0,must-revalidate
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Server: Netlify
HSTS: not observedDNSSEC: not observedWAF / firewall: not observedCloaking flag: not observed
Saved response-header values · 12
Accept-Ranges
bytes
年齢
4161
Cache-Control
public,max-age=0,must-revalidate
Cache-Status
"Netlify Edge"; hit; ttl=31531840
Content-Encoding
gzip
Content-Length
6103
Content-Type
text/html; charset=UTF-8
Date
Mon, 19 Oct 2026 01:34:27 GMT
Etag
"35a6246d53da8ff83d74a0cb8e1bd263-df"
Server
Netlify
Vary
Accept-Encoding, X-Nf-Account-Tier
X-Nf-Request-Id
01M58WQD7D6327CYVEHBAYC23J
Values retained by the collector; long values may be shortened during collection.
Registration & observation details3
Availability observations
Last reachable observation
Last content observation
Estimate basis
Currently reachable
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Check for cloaking
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
地元の警察 — たとえ直ちに行動を起こせなくても、公式な記録が残される
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
詐欺による金銭の返還を装った詐欺 — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
About this reportSources, observation dates and corrections
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.
(ID)
