finance31-ab11[.]pro

This domain, finance31-ab11.pro, poses a high-risk generic phishing threat. Threat analysts have classified it as an active phishing campaign that attempts to trick users into divulging sensitive information, likely by imitating a legitimate financial login page. The site is still active and currently returns a 404 Not Found page, which may be a temporary state or part of the attacker's evasion tactics.

The domain was created on April 21, 2026, and is registered through NameCheap, Inc. It resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Let's Encrypt (E8). VirusTotal data shows that 7 out of 95 security vendors flagged this domain as malicious. Additionally, it appears on 3 security blocklists, indicating a consensus among threat intelligence feeds. The domain's recent creation and low trust score further underscore its suspicious nature.

Users who encounter this domain should not click any links or enter any personal information. Organizations should block access to finance31-ab11.pro at the network level and add the domain to their blocklists. Phishing awareness training should emphasize verifying URLs before entering credentials, especially for financial services. If any credentials were inadvertently submitted, they must be changed immediately and monitored for unauthorized use.