ubisupport[.]live

The domain ubisupport.live is currently active and functions as a phishing portal impersonating Ubisoft customer support infrastructure. Analysis indicates this is a generic phishing threat designed to harvest user credentials, payment details, or account recovery information under the guise of legitimate Ubisoft services. No specific payload type (e.g., crypto drainer) has been confirmed, but the domain exhibits classic brand impersonation tactics targeting gaming community members. Infrastructure analysis reveals the domain was registered on May 23, 2026, through Sav.com, LLC, a registrar frequently associated with newly created suspicious domains. As of the latest assessment, ubisupport.live is flagged by 17 of 95 security vendors on VirusTotal, indicating moderate to high confidence in malicious classification. The domain appears on one security blocklist (PhishDestroy) and maintains an active status with no observed takedown attempts. No associated IP address or hosting provider details were provided in the initial data, though subsequent investigations typically reveal bulletproof hosting or compromised infrastructure. Current status confirms ubisupport.live remains operational and unmitigated. Organizations and end users are advised to implement immediate blocking at the DNS or network perimeter level. Security teams should monitor for credential submission attempts originating from this domain and correlate with internal logs for potential compromised accounts. Ubisoft account holders should be alerted to verify support communications exclusively through official channels (e.g., ubisoft.com) and enable multi-factor authentication where available. Given the domain's recent registration date and active blocklist presence, continued monitoring for related infrastructure (e.g., subdomains, redirect chains) is recommended.