nbe[.]6818vip[.]cc

This domain, nbe.6818vip.cc, presents an elevated risk as a generic phishing threat specifically designed for credential theft, likely impersonating the National Bank of Egypt (NBE). The domain is now offline, but during its active period it posed a serious risk to users who might have entered sensitive information.

PhishDestroy's analysis reveals that nbe.6818vip.cc was created on February 6, 2025, and registered through Gname.com Pte. Ltd. The domain resolved to the IP address 2606:4700:3031::6815:48ca, which is associated with Cloudflare. Its SSL certificate was issued by Google Trust Services (WE1), lending a false sense of legitimacy. On VirusTotal, 5 out of 95 security vendors flagged the domain as malicious, and it appears on one security blocklist. The domain has since been taken offline.

To protect against credential theft, users should never enter login credentials or personal information on unsolicited websites. Verify URLs carefully, enable multi-factor authentication on all accounts, and use a password manager to auto-fill credentials only on legitimate sites. If you have already interacted with this domain, change your passwords immediately and monitor accounts for suspicious activity.