fintec[.]sbrbot[.]trading

The domain fintec.sbrbot.trading is a phishing site engaged in brand impersonation, specifically targeting users of the 'foundation' platform. It operates as a fake exchange scam, designed to deceive victims into believing they are interacting with a legitimate service. As of the latest verification, fintec.sbrbot.trading has been taken offline, though its prior activity poses a residual risk to those who may have engaged with it.

Technical indicators confirm the elevated risk level of fintec.sbrbot.trading. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Netcraft, and appears on 1 security blocklist (PhishDestroy). It was registered through MIT (ASN: 153568) and resolved to the IP address 163.61.188.89, located in the US under AS153568 (NEW DHAKA HARDWARE). The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'Home - xsefton'. Technologies detected on the site include PHP, Tailwind CSS, LiteSpeed, Alpine.js, jsDelivr, and HTTP/3. Google Safe Browsing did not flag the domain, and no creation date is available.

Individuals who interacted with fintec.sbrbot.trading should take immediate safety steps. Since this was a fake exchange scam, victims should review their accounts for unauthorized transactions, change passwords, and enable two-factor authentication (2FA) on all related platforms. If cryptocurrency was involved, revoke any token approvals and consider moving funds to a new wallet. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, and notify the impersonated brand (foundation) to aid in mitigation efforts.