finance32-et74[.]pro

Analysis of finance32-et74.pro shows a newly registered domain created on 28 April 2026 through NameCheap, Inc. The domain has been observed by four of ninety‑one VirusTotal scanners, indicating that a minority of security vendors have flagged it as malicious. It currently appears on three public blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL blocklist services, confirming active mitigation by multiple threat‑intelligence feeds. No public data on the hosting IP, autonomous system, or TLS certificate has been released, and the site’s HTTP response code, page title, or content have not been publicly documented.

The limited detection footprint suggests the domain is being used in a targeted credential‑harvesting campaign, consistent with the generic phishing classification. Uncertainty remains regarding the scale of the operation, the specific brands or services being impersonated, and the infrastructure behind the site. Defenders should add finance32-et74.pro to local deny lists, monitor DNS queries for this FQDN, and enforce outbound filtering that blocks connections to the domain.

Continuous re‑scanning with multi‑engine services such as VirusTotal is recommended to capture any future changes in detection status. Organizations employing phishing‑resistant authentication should treat any login attempts to this domain as fraudulent and educate users accordingly.