finoraaltd[.]live

As of July 12, 2026, the domain finoraaltd.live has been confirmed as a phishing site. The domain, which resolves to the IP address 198.251.81.188, is hosted in the United States under the ASN AS53667 FranTech Solutions. The page title 'Finora Asset | Home' suggests that the site may be attempting to mimic a legitimate financial asset management service. However, the exact content and structure of the site have not been analyzed, and further investigation is recommended to determine the specific target of the phishing activity. The domain was created on February 25, 2026, and is currently active. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating a high risk level. The SSL certificate is issued by Let's Encrypt, which is a common practice among phishing sites to gain user trust. The domain is registered through Dynadot LLC, and its MX records point to itself, which is unusual and may indicate a lack of legitimate email infrastructure. Technologies detected on the site include PHP, Chart.js, Tailwind CSS, Stripe, LiteSpeed, Unpkg, SweetAlert2, and Smartsupp. These technologies can be used to create a convincing and interactive user experience, which is often a hallmark of sophisticated phishing sites. Gridinsoft has assigned a trust score of 0/100, further emphasizing the domain's suspicious nature. Defenders should immediately block this domain and educate users on the risks of phishing. Additional monitoring and analysis are advised to track any changes in the domain's infrastructure or tactics.