Is dexbank.io a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This domain hosts a single-page placeholder site whose only visible content is a "Coming soon" title and a short block of text. The page gives no product, company, service or contact information. The domain name suggests a decentralized-exchange or digital-banking theme, but the page itself does not describe any such offering, so its intended business model cannot be established from the page.

Scam/Impersonation Risk

This is the most serious area of the assessment, and confirmed contradictory signals are present. The domain is blacklisted by external threat-intelligence sources. Several independent security engines, including multiple tier-one vendors, classify it as malicious. That level of agreement is a decisive adverse signal and is not offset by the site's valid encryption or mainstream hosting. Browser-behaviour testing also found strong cloaking. After simulated user interaction, the page's content and appearance changed materially from what was first rendered. A bare "Coming soon" shell that swaps content once a visitor interacts is consistent with a staging page for a different payload. This pattern fits phishing or credential-harvesting infrastructure and is not typical of a genuine pre-launch page. The domain's current registration is also very recent, while archive captures show an earlier footprint, so the present registration does not line up with the historical record. No conflicting legal identities and no confirmed impersonation of a named brand were observed. The risk comes from the reputation findings and the cloaking behaviour, not from identity conflicts. Evidence:

• Homepage reputation check: 13 malicious and 3 suspicious verdicts from the aggregated security engines, including three tier-one vendors.
• Homepage behavioural test: strong cloaking after interaction, with a semantic content difference of about 18.2 and a visual difference of about 16.7 between renderings.
• Registration record: registered 2026-08-15 (~0.19 years old, about 71 days).
• Web archive: 5 snapshots spanning 2021–2025 (5 years tracked), sparse and discontinuous.

Regulatory Verification Notes

The homepage is the only page captured. It carries no terms of service, privacy policy, company name, registration number or licence statement. For a domain whose name implies financial or exchange services, that absence is a content gap. It is not proof of wrongdoing on its own, but it leaves nothing on the site to anchor a real-world operator. The registration record lists only a generic placeholder in the owner field. The registrar is NICENIC International Group Co., Limited. No third-party broker or regulatory listing matched this site. Operator identity could not be independently connected to any real-world business or person. Evidence:

• Homepage content: about 228 characters of text under the title "Coming soon", with no legal or identity disclosures.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-11. A DV certificate confirms only control of the domain, not the operator's identity.
• Registrar: NICENIC International Group Co., Limited. Registration runs to 2027-08-15.

What to Verify Next

No prospective user should engage with this domain until the threat detections are cleared. Whether the detections are cleared can be checked by re-testing the domain against major reputation services at a later date. A genuine operator should also be able to show the domain linked from an established, independently verifiable source, such as an official social-media profile or documentation. That link should be confirmed through an independent route, not through anything on the page. If the site later presents financial, exchange or custody services, the named operator's licence should be confirmed directly with the relevant regulator's public registry. Any official support channel should be confirmed offline through an independent route. Evidence:

• Homepage: the page only presents a "Coming soon" title, so no claim on it can currently be checked against an independent source.
• Network behaviour: 42 external data requests were made during testing, accounting for about 92.6% of observed external activity. None went to unlisted destinations, and no wallet-connection or external password-form activity was recorded.
• Page capture: the page returned a successful response in all 3 test runs.

Summary Verdict

The site carries an elevated, clearly cautionary risk posture. Active adverse reputation findings and deceptive page behaviour outweigh the technically sound transport security and the absence of observed form or wallet abuse. No evidence supports treating it as a legitimate service at this time. A sensitive interaction with it should be considered unsafe.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All four observed addresses are CDN edge servers, and the origin server was not observable. This is a mitigating factor, since the domain resolves cleanly and the certificate is valid, but it is not evidence of legitimacy. Because only edge servers are visible, the real hosting cannot be independently checked. The same setup would allow page content to be swapped quickly without any visible change in infrastructure. The domain's young registration with sparse DNS subdomains is an unconfirmed heuristic and is weighed accordingly.

Closing Assessment

At most, the page should be viewed read-only, for example in an isolated environment. Credentials, wallet connections, payments and downloads should be avoided entirely. Any message or link that directs a user to this domain should be treated as suspect until the threat listings are independently cleared.