info-debank[.]com

The domain info-debank.com was registered on 28 July 2025 through the registrar MAT BAO CORPORATION. DNS resolution points to the IP address 172.217.23.100, which is announced by AS15169 Google LLC and geolocated to Italy. The domain does not present an SSL certificate, meaning HTTPS connections are unavailable. During the brief window when the site was reachable, the only observed HTML element was the page title “Google,” matching the declared brand target of Google and supporting the classification as a brand‑impersonation campaign.

VirusTotal analysis recorded 14 positive detections out of 95 scanners, indicating that multiple security vendors recognized malicious behavior associated with the domain. The domain is listed on two public blocklists, specifically PhishDestroy and ScamSniffer, and both services have reported the site as taken offline. Nameservers are hosted by Cloudflare (rustam.ns.cloudflare.com and wally.ns.cloudflare.com), a common choice for fast‑flux or temporary phishing infrastructure. Current intelligence shows the site is no longer accessible, but the underlying infrastructure—particularly the use of a legitimate Google IP address—demonstrates an attempt to gain trust by leveraging a trusted network range.

Uncertainty remains regarding the exact content that was served before takedown, as no screenshots or HTTP response details have been captured. Defenders should continue to block the domain at network perimeter, add the IP address to reputation filters, and monitor for any re‑registration attempts or similar domains that resolve to the same Google‑owned IP space. Ongoing surveillance of the registrar MAT BAO CORPORATION for related registrations is also advised.