finance92-labore78[.]sbs

The domain finance92-labore78.sbs is currently active and resolves to 45.9.149.97, an address attributed to a network in the Netherlands operated by NiceIT. Authoritative name servers are carla.ns.cloudflare.com and troy.ns.cloudflare.com, indicating Cloudflare DNS services. Registration was performed through NameCheap, Inc., and the domain appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports ten of ninety‑one scanners flagging the host, reinforcing its malicious reputation. HTTP requests return a 200 OK status while the page title reports "404 Not Found," suggesting a placeholder or error page used to conceal malicious activity. No additional content has been publicly disclosed, and the specific phishing campaign or targeted brand has not been identified. Defenders should block the domain at perimeter firewalls, update DNS filtering lists, and monitor outbound connections to the associated IP. Threat hunters should correlate any credential or payment data exfiltration attempts with this indicator, and incident responders should treat any user interaction with the site as compromised.