finance31-et63[.]sbs

The domain finance31-et63.sbs was registered on May 29, 2026 through NameCheap, Inc. and currently resolves to the IPv4 address 188.114.96.3. VirusTotal analysis shows that 7 of 91 security vendors have flagged the domain, indicating a measurable detection rate across multiple scanning engines. The domain appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a malicious phishing resource.

The threat is identified as a generic phishing operation and is listed with an elevated risk level, reflecting the potential impact of credential harvesting or credential‑related fraud. Infrastructure analysis confirms a single‑point hosting configuration, with no additional IP aliases observed. No public SSL certificate details, HTTP response codes, page title, or Safe Browsing/O TX entries have been disclosed, leaving those vectors unverified at this time.

Defenders should add finance31-et63.sbs to outbound and inbound filtering rules, monitor DNS queries for the domain, and enforce blocking at network perimeter devices. Continuous re‑evaluation is advised, as additional telemetry such as page content, certificate data, or further vendor detections may emerge, altering the threat posture.