finance38-et86[.]sbs

The domain finance38-et86.sbs was registered with NameCheap on June 11, 2026 and has been observed in active malicious campaigns as of the report date, July 29, 2026. Threat intelligence sources place the domain on three independent security blocklists and it is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services. VirusTotal analysis shows that six of ninety‑one scanning engines have flagged the domain, indicating a consensus among a subset of scanners that the site hosts malicious content.

The elevated risk rating reflects the combination of recent creation, rapid inclusion on blocklists, and multi‑vendor detections. No public page title, SSL certificate details, or HTTP response codes have been disclosed, and the content of the site has not been captured, leaving the exact phishing lure undefined. Defenders should add finance38-et86.sbs to URL filtering rules, enforce DNS sinkholing, and monitor outbound connections to its resolved IP addresses.

Network traffic to the domain should be logged and any credential submissions intercepted for forensic analysis. Continuous re‑evaluation is advised, as additional scanner detections or blocklist entries may emerge, providing further context on the payload or targeted brand.