# agency.enkpay.com — SUSPICIOUS

> PhishDestroy identifies agency.enkpay.com as a generic phishing domain posing as a payment portal. Resolves to IP 209.74.80.245 since May 18, 2023.

## Summary
PhishDestroy identifies agency.enkpay.com as a generic phishing domain currently active and under investigation. The domain mimics a financial services login portal to harvest user credentials and payment details. No specific brand impersonation has been confirmed.


This domain was flagged by 0 of 95 VirusTotal vendors, registered through NAMECHEAP INC on May 18, 2023, and resolves to IP 209.74.80.245. Additional telemetry indicates no current blocklist presence and low trust scores across multiple threat intelligence platforms.


The campaign remains active with low detection coverage at this time. Users should avoid interacting with this domain or submitting sensitive information. Organizations are advised to block the domain at the network perimeter and update endpoint detection rules to monitor for connections to 209.74.80.245. Report any observed activity to your security team and consider updating email filtering rules to block messages referencing this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-05-18 10:04:28
- Registrar: NAMECHEAP INC
- IP: 209.74.80.245

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d46cb435-79b4-41ad-bba5-9fbd5f121e29
- PhishDestroy: https://phishdestroy.io/domain/agency.enkpay.com/
- LLM endpoint: https://phishdestroy.io/domain/agency.enkpay.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/agency.enkpay.com/
Last updated: 2026-03-20