18313[.]xyz

This domain, 18313.xyz, is classified as a generic phishing threat with a high risk level. The analysis does not identify a specific impersonated brand or associated drainer kit. The domain remains active and poses a risk of credential harvesting or malware distribution through deceptive landing pages.

Infrastructure analysis reveals the following exact technical indicators: VirusTotal score is 9/95 security vendors flagging the domain as malicious. The domain was created on June 23, 2026, and resolves to IP address 103.27.177.163. It is registered through GMO Internet, Inc., and uses a Let's Encrypt SSL certificate. Google Safe Browsing status and specific blocklist counts are not provided in the known intelligence.

Current status indicates the domain is still active. Recommended response actions include blocking the domain at network perimeter and email gateways, adding it to threat intelligence feeds, and monitoring for related subdomains or IPs. Remaining risk includes potential re-registration under different TLDs or hosting providers, and users may still access the domain if filtering is not applied.