finance36-et12[.]pro

Finance36-et12.pro was registered on May 15 2026 via NameCheap, Inc. Within less than three months the domain has been flagged by multiple security services. VirusTotal reports that 4 of 91 scanning engines have raised detections against the domain, indicating that at least a subset of anti‑malware tools consider it malicious. Independent blocklists have added the domain to their deny lists; PhishDestroy, MetaMask and SEAL explicitly block access, and the domain appears on three additional public blocklists.

The current risk rating is elevated and the status is active, suggesting ongoing use in campaigns. No public information is available regarding the hosting IP address, ASN, TLS certificate details, HTTP response codes, or page title, so the underlying infrastructure cannot be fully profiled at this time. The limited detection count combined with rapid blocklisting implies that the domain is being used for generic phishing operations, likely to harvest credentials or deliver malicious payloads.

Defenders should treat any traffic to finance36-et12.pro as hostile. Recommended actions include adding the domain to local deny lists, configuring DNS‑based filtering to drop queries, and ensuring that endpoint protection solutions are updated to include the latest signatures that flag the domain. Continuous monitoring of threat‑intel feeds for additional indicators such as IP addresses, URL paths, or payload hashes is advised, as further details may emerge as the campaign evolves.