dbs[.]thedigiservice[.]com

Analysis conducted on July 23, 2026 identifies dbs.thedigiservice.com as a phishing infrastructure targeting the DBS electronic KYC process. The domain was registered on February 21, 2026 through GoDaddy.com, LLC and uses the default GoDaddy name servers ns77.domaincontrol.com and ns78.domaincontrol.com. DNS resolution points to the IP address 13.126.221.200, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in India. No TLS certificate is presented for the host, indicating the site operates without HTTPS protection.

The page title returned by the server is “DBS‑EKyc”, matching the advertised target. VirusTotal has recorded 17 detections out of 93 scanned vendors, and the domain appears on a single external security blocklist. PhishDestroy has also listed the host as blocked. Current operational status is reported as offline, and no HTTP response codes are available for further assessment.

The combination of recent registration, lack of SSL, association with a known cloud provider, and multiple vendor detections suggests an elevated risk of credential harvesting. Defenders should add the domain and its resolving IP to outbound deny lists, monitor for any future re‑activation, and ensure that any internal DNS caching of the host is cleared. Additional scrutiny of traffic to Amazon‑hosted IP ranges originating from corporate networks is recommended, as is the inclusion of the domain in web‑gateway and email‑filtering rules. Ongoing observation of related GoDaddy‑registered domains may reveal further campaign infrastructure.