dbs-vi[.]com

This domain is flagged as a credential theft scam designed to impersonate DBS Bank, a major financial institution. Analysis indicates the infrastructure is engineered to deceive users into submitting sensitive login credentials, which are then harvested for unauthorized access to banking accounts. The risk level is elevated due to the targeted nature of the threat and the potential for financial loss or identity compromise. Infrastructure analysis reveals multiple red flags. The domain dbs-vi.com was registered on November 16, 2025, through NameMart Pte. Ltd., a registrar frequently associated with fraudulent activity. It resolves to the IP address 154.82.96.152, hosted on AS399077 (Tcloudnet) in the United States, a network with a history of hosting malicious domains. Security vendors on VirusTotal flagged this domain at a rate of 17/95, while it appears on at least one security blocklist. The page title, "Trang chủ" (Vietnamese for "Home"), suggests targeting of Vietnamese-speaking users, aligning with regional DBS Bank operations. Notably, the domain lacks an SSL certificate, further undermining its legitimacy and exposing user data to interception. Mitigation against credential theft scams requires a multi-layered approach. Users should verify the authenticity of any banking portal by cross-referencing the URL with the official domain (e.g., dbs.com.sg) and checking for SSL encryption (HTTPS). Financial institutions typically do not request sensitive information via unsolicited emails or links; users should navigate directly to the bank’s website rather than clicking embedded links. Organizations should implement email filtering rules to block domains registered through high-risk registrars and those lacking SSL certificates. Network-level protections, such as DNS filtering, can prevent resolution of known malicious domains like dbs-vi.com. For users who may have interacted with this domain, immediate password resets and enablement of multi-factor authentication on all financial accounts are critical steps to mitigate potential compromise.