fincorebank[.]sefantech[.]nx[.]kg

fincorebank.sefantech.nx.kg is a subdomain of nx.kg. PhishDestroy first observed the hostname on Aug 30, 2026. The captured page title is “fincorebank.sefantech.nx.kg”. Current evidence score: 65/100 (high).

One source contains a positive finding: VirusTotal. VirusTotal recorded 3 detections among 91 engines: CRDF, Netcraft, SOCRadar on Aug 30, 2026 at 05:42 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 29, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 30, 2026 at 07:26 UTC. URLScan completed without a malicious verdict (score 0) on Aug 30, 2026 at 05:08 UTC.

The collector marked the hostname reachable on Aug 30, 2026 at 02:28 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 192.18.158.191 on AS31898 (Oracle Corporation). The recorded endpoint location is Toronto, CA. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 23, 2026; checked Aug 30, 2026 at 04:02 UTC.

Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.