finance31-et7[.]sbs

PhishDestroy has identified finance31-et7.sbs as a confirmed generic phishing domain. The site was designed to deceive users into revealing sensitive information, though it does not impersonate a specific brand or utilize a known crypto drainer kit. The domain was registered through NameCheap, Inc. and its SSL certificate was issued by Let's Encrypt (E7), lending it a false sense of legitimacy.

Technical analysis reveals that finance31-et7.sbs has a VirusTotal detection rate of 5 out of 95 security vendors, indicating that while some security tools flag it, many do not. The domain resolves to IP address 104.21.20.99, and it was created on June 17, 2026. It appears on 3 security blocklists, and Google Safe Browsing likely does not list it given the low detection count. The page title currently returns a 404 Not Found error, suggesting the site has been taken offline.

As of now, finance31-et7.sbs is offline, which is a positive development. However, the domain could be reactivated or used for future campaigns. Users should remain vigilant and avoid interacting with any emails or messages linking to this domain. PhishDestroy recommends verifying all URLs before clicking and reporting any suspicious activity. The remaining risk is low due to the current offline status, but the domain's registration details and blocklist presence indicate it was a credible threat while active.