antares-finviora[.]app

This domain is flagged as a credential harvesting phishing site targeting users of financial services. The page title, 'Antares Finviora | The Official Website 2026,' suggests an attempt to mimic a legitimate financial institution, likely to trick visitors into entering sensitive login or personal information. The domain employs social engineering tactics, presenting itself as an official portal to exploit user trust. Analysis indicates the domain was registered on February 24, 2026, through NETIM SARL, and resolves to the IP address 94.26.38.51, hosted on AS202412 Omegatech LTD in Bulgaria. It appears on 3 security blocklists, including PhishDestroy and MetaMask, and is flagged by Google Safe Browsing as phishing. VirusTotal reports 13 out of 95 security vendors detecting malicious activity associated with this domain. The SSL certificate is issued by Let's Encrypt (R12), a common tactic to lend false legitimacy to phishing sites. Users who visited antares-finviora.app should immediately revoke any entered credentials, particularly if financial or login details were submitted. Monitor associated accounts for unauthorized activity and consider resetting passwords for any services where credentials may have been reused. Network administrators should block the domain and its resolving IP (94.26.38.51) at the firewall or DNS level to prevent further access. If browser sessions were active during the visit, clear cached data and cookies to mitigate potential session hijacking risks.