finance36-et30[.]sbs

Analysis indicates that the domain finance36-et30.sbs is actively flagged as a credential phishing site. Registered on June 11, 2026, through NameCheap, Inc., the domain currently resolves to the IP address 104.21.83.122. This IP falls within a range frequently associated with low-reputation hosting providers, though no specific autonomous system or geolocation details have been confirmed for this instance. The domain appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL, suggesting coordinated detection efforts by financial and anti-phishing vendors.

VirusTotal reports that five of ninety-one security vendors have flagged this domain, a detection rate consistent with emerging or low-volume phishing campaigns. No additional context is available regarding the specific brand or service being impersonated, as the exact page content has not been analyzed. The domain's recent creation and immediate inclusion on multiple blocklists further support the assessment of elevated risk. Defenders are advised to treat this domain as malicious and implement blocking at the DNS or network layer.

Organizations using MetaMask or similar financial security tools should verify that existing protections remain in place, as this domain has already been preemptively blocked by those platforms. While the infrastructure does not currently exhibit high-volume abuse indicators, the combination of recent registration, low detection counts, and targeted blocklisting suggests a focused phishing operation rather than widespread opportunistic abuse. No SSL certificate details or HTTP response codes are available for further assessment, limiting additional infrastructure-based mitigations at this time.