public company · US
DEUTSCHE BANK AKTIENGESELLSCHAFT
- Primary official domain
- db.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
2
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
2
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- deutschebank
- Label aliases
- Deutsche Bank
- Official domains
- db.com (all)
- Generated spellings
- 188 tracked · 38 observed somewhere · 150 not observed (all)
- Can receive mail
- 13 spellings and 2 reported domains publish MX records · mail at GoDaddy 2 · Google 2 · Amazon Web Services 1 · 10 more (38 spellings and 2 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
deutschebank[.]abbove[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Google (consumer mailbox) · DMARC policy reject · sends via Google, 4227532.spf07.hubspotemail.net, email.freshdesk.com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive108.129.9.153Amazon Web ServicesAmazon Web Services (AS16509) · USec2-108-129-9-153.eu-west-1.compute.amazonaws.com34.249.100.15Amazon Web ServicesAmazon Web Services (AS16509) · USec2-34-249-100-15.eu-west-1.compute.amazonaws.com34.249.40.69Amazon Web ServicesAmazon Web Services (AS16509) · USec2-34-249-40-69.eu-west-1.compute.amazonaws.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
deutsche-bank[.]live[.]itonicsit[.]deMail: MXSPF · Confirmed phishing host address (DomainSpoof, 14 days), blocklist.de attackers (all services), blocklist.de mail attackersDMARC · checked 2026-10-19mail at domainfactory (web / mail hosting) · DMARC policy quarantine · sends via _spf.itonicsit_de._d.easydmarc.pro | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive3.76.234.85Amazon Web ServicesAmazon Web Services (AS16509) · USec2-3-76-234-85.eu-central-1.compute.amazonaws.com35.156.242.5Amazon Web ServicesAmazon Web Services (AS16509) · USec2-35-156-242-5.eu-central-1.compute.amazonaws.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
2 registrable domains · 2 hostnames · page 1 of 1
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.