finance92-molestias43[.]sbs

The domain finance92-molestias43.sbs was registered on June 11 2026 through NameCheap, Inc. It has since been observed in three security blocklists, specifically PhishDestroy, MetaMask, and SEAL, indicating active use in phishing campaigns. VirusTotal analysis shows that 11 of 91 scanning engines have flagged the domain as malicious, providing additional corroboration of its threat profile. The classification in the supplied intelligence is generic phishing, suggesting that the site is being leveraged to harvest credentials or other sensitive information without targeting a particular brand.

Infrastructure analysis is limited to the data provided; no public IP address, hosting provider, SSL certificate details, or HTTP response information have been disclosed. Consequently, the exact hosting location and any TLS configuration remain unknown. Similarly, Safe Browsing and Open Threat Exchange (OTX) entries are not referenced in the current dataset, so their status cannot be confirmed.

Given the presence on multiple blocklists and the multi‑vendor detections on VirusTotal, defenders should treat any traffic to finance92-molestias43.sbs as high‑risk. Recommended mitigation steps include adding the domain to deny lists at perimeter firewalls and DNS filtering solutions, updating endpoint protection signatures, and monitoring for related indicators such as the registrar NameCheap, Inc. and the three blocklists that have already listed the domain. Continuous re‑evaluation is advised, as further intelligence—such as hosting details, TLS fingerprint, or observed payloads—may emerge and refine the risk assessment.