lbmayuty[.]com

The domain lbmayuty.com has been identified as a generic phishing threat, with elevated risk levels. No specific brand or drainer kit has been directly associated with this domain. The domain was created on April 27, 2026, indicating it may have been recently established, possibly to avoid long-term detection. The page title 'BIB' suggests it may have been used as a deceptive landing page for phishing operations.

Technical indicators provide substantial evidence of phishing activity associated with lbmayuty.com. VirusTotal has flagged the domain with detections from 4 out of 95 security vendors, suggesting some level of recognition among cybersecurity entities. The domain was registered through Name SRS AB, possibly chosen for its registration anonymity features. The IP address it resolves to is 134.122.200.175, which could have been used to host the phishing content. The domain appears in 3 different security blocklists, indicating active efforts by various organizations to prevent access to it. Additionally, it has been noted in one AlienVault OTX threat intelligence pulse, which suggests monitoring by threat intelligence platforms.

Currently, the status of lbmayuty.com is offline, likely due to removal or takedown efforts. This action has mitigated immediate risk, though historical data suggests its presence across blocklists may indicate residual threats from associated infrastructure or cloned domains. Continuous monitoring is recommended to identify any resurgence or linked malicious activity. Users are advised to maintain vigilance and ensure their systems and networks employ updated security measures to block domains with similar indicators, reducing exposure to potential phishing attacks.