buaizleiloeirobr[.]com

The domain buaizleiloeirobr.com has been identified as a generic phishing threat, posing a risk to users who may encounter deceptive pages designed to steal sensitive information. No specific brand or drainer kit has been associated with this domain based on available intelligence. This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 187.77.63.182, created on March 27, 2026. Security analysis reveals that 1 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on 1 security blocklist. Additionally, AlienVault OTX includes this domain in 1 threat intelligence pulse, indicating some level of community awareness. The SSL certificate was issued by Let's Encrypt with identifier E8, which is commonly used for both legitimate and malicious sites. Currently, the domain is offline, suggesting that hosting or the site itself has been taken down, likely as a result of security interventions or registrar action. However, given the low detection rate and recent creation date, the risk remains elevated, as the domain could be reactivated or used in future campaigns. Users are advised to avoid any interaction with buaizleiloeirobr.com and to report any unsolicited communications referencing this domain to relevant security teams.