upnify[.]live

The domain upnify.live is currently operating as an active phishing infrastructure designed to impersonate UPNIFY, a legitimate customer relationship management platform. Analysis indicates this is a fake login portal intended to harvest user credentials through deceptive authentication interfaces. The domain remains active and continues to resolve, posing an elevated risk to unsuspecting users. Infrastructure analysis reveals the domain was registered on March 24, 2026, through Dynadot Inc, a registrar frequently associated with malicious registrations. It resolves to the IP address 188.114.96.3 and employs technologies including PHP, Hostinger hosting, and Cloudflare services, which are commonly used to obfuscate phishing operations. The domain is flagged by 15 of 95 security vendors on VirusTotal, appears on one security blocklist, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by Let's Encrypt, a detail often exploited by threat actors to lend superficial legitimacy to fraudulent sites. The page title explicitly displays 'UPNIFY,' reinforcing the brand impersonation tactic. Current status confirms the domain remains active and accessible. Users and organizations are advised to block resolution to 188.114.96.3 and implement network-level filtering for upnify.live. Security teams should monitor for credential submission attempts originating from this domain and conduct internal audits for any prior exposure. End users should be educated to verify domain authenticity before entering login credentials, particularly when prompted by unexpected or unsolicited authentication requests. Given the domain’s creation date discrepancy—registered in 2026, likely an error or intentional misdirection—additional scrutiny is warranted.