finance98-officia62[.]sbs

Analysis of finance98-officia62.sbs on 19 July 2026 shows that the domain resolves to the IPv4 address 45.9.149.97, hosted in the Netherlands and serviced by Cloudflare nameservers carla.ns.cloudflare.com and troy.ns.cloudflare.com. Registration was performed through NameCheap, Inc., and the domain currently appears on three publicly‑known security blocklists. It is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. VirusTotal reports that 11 of 91 scanned security vendors flag the domain as malicious, corroborating the blocklist observations. HTTP requests return a 200 status code while the page title reported by the scanner is “404 Not Found”, indicating a possible decoy or misconfiguration. The site is classified as a high‑risk generic phishing operation and remains active at the time of assessment. No visual or credential‑capture page has been observed, so the exact phishing lure remains unknown. Defenders should immediately add finance98‑officia62.sbs to DNS and URL filtering policies, ensure that outbound traffic to the associated IP 45.9.149.97 is denied, and monitor for any future resolution changes. Continuous reconciliation with blocklist updates and periodic re‑scanning on VirusTotal are recommended to track any evolution of the threat.