finance35-et73[.]sbs

Analysis of the domain finance35-et73.sbs indicates it is an active phishing threat targeting financial credentials. The domain was registered on June 11, 2026, through NameCheap, Inc., a registrar frequently associated with malicious infrastructure. As of July 29, 2026, the domain is flagged by 6 of 91 security vendors on VirusTotal, a detection rate consistent with known phishing campaigns.

It appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL, which specialize in financial fraud and cryptocurrency-related threats. The specific nature of the phishing content remains unconfirmed, as the page title and brand impersonation details are not yet analyzed. However, the combination of a newly registered domain, financial-themed subdomains, and targeted blocklist inclusion strongly suggests an intent to harvest login credentials or payment details.

Defenders should treat this domain as elevated risk and block it at the DNS or proxy level. No legitimate services are known to operate under this domain, and user access should be restricted pending further investigation or takedown.