finance99-et54[.]sbs
“404 Not Found”
finance99-et54.sbs — Konten tidak tersedia. Peniruan identitas merek: MetaMask. Ringkasan bukti: VirusTotal 6/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, LevelBlue, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 68/100. Registrar: NameCheap.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Finance99-et54.sbs was registered on June 03, 2026 through NameCheap, Inc. The domain resolves to the IP address 172.67.179.107, which is hosted on a Cloudflare edge network. Within three days of its creation the domain was added to three independent security blocklists and is currently listed by PhishDestroy, MetaMask, and SEAL as a malicious site. VirusTotal has processed the domain and six of ninety‑one scanned scanners returned a malicious verdict, confirming the presence of phishing‑related indicators.
The rapid appearance on multiple blocklists and the early detection by reputable anti‑phishing services suggest the site is being used for credential‑stealing campaigns targeting financial services. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or content analysis is available at this time, leaving the exact phishing vector and victim profile unconfirmed. Defenders should block any traffic to finance99‑et54.sbs at the network perimeter, update URL filtering lists with the observed blocklist entries, and monitor for related C2 infrastructure tied to the hosted IP.
Continuous re‑scanning of the domain on VirusTotal and other sandbox services is advised to capture any evolving payloads or changes in hosting. Organizations that rely on financial credential authentication should enforce multi‑factor authentication and educate users about unsolicited requests for login information, especially from newly created domains such as this one.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ZONA SHORTDOT · BUKTI PUBLIK
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive