by[.]en518[.]com

The domain by.en518.com has been identified as a generic phishing site, posing an elevated risk to users who may encounter it. There is no specific brand or drainer kit associated with this domain, but it is designed to deceive and potentially steal sensitive information from unsuspecting users.

Technical indicators reveal that by.en518.com has been flagged by 14 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion. The domain was registered on February 21, 2026, and currently appears on one security blocklist. The exact registrar and IP address associated with the domain are not provided in the known intelligence, but the creation date and blocklist presence suggest recent and targeted malicious activity. The domain's status on Google Safe Browsing (GSB) is not specified, but its inclusion in a blocklist and the elevated risk level suggest that it is considered unsafe.

As of the latest assessment, by.en518.com is offline. However, the domain's previous online status and the number of security vendors flagging it highlight the need for ongoing vigilance. Users are advised to avoid accessing this domain and to monitor their accounts for any unauthorized activity if they believe they may have interacted with it. Despite the domain being taken offline, there remains a risk of it being reactivated or used in future campaigns, and thus, continued monitoring and proactive security measures are recommended.