finance39-ea95[.]pro

This domain presents an elevated risk due to its classification as a generic phishing threat. PhishDestroy analysts identified that finance39-ea95.pro was designed to impersonate legitimate financial services, luring users into disclosing sensitive information. Although the domain is currently offline, its recent activity and registration details suggest it was actively used for malicious purposes.

The domain was registered through NameCheap, Inc. on June 17, 2026, and resolved to IP address 188.114.96.3. It used an SSL certificate from Let's Encrypt (E8), which is commonly abused by phishers for a false sense of security. VirusTotal results show 3 out of 95 security vendors flagged the domain as malicious, and it appears on three security blocklists. The page title displayed a 404 Not Found error, indicating the site was likely taken down or its content removed. These technical indicators collectively confirm the domain's association with phishing campaigns.

Users who may have interacted with finance39-ea95.pro should monitor their accounts for suspicious activity and change passwords if any credentials were submitted. It is also recommended to enable multi-factor authentication on financial accounts and report the domain to relevant security teams. As a precaution, block the domain at the network level and ensure that email filters are updated to recognize similar domains. PhishDestroy continues to track this threat and will update advisories as new information emerges.