# uboionline.sbs — MALICIOUS

> PhishDestroy identifies uboionline.sbs as a credential theft domain. 5/95 VirusTotal vendors flag this site as a generic phishing page. Block it immediately.

## Summary
PhishDestroy identifies uboionline.sbs as a credential theft domain actively harvesting user logins through brand impersonation. This recently registered site (July 30, 2025) resolves to 198.251.84.200 and leverages a Let’s Encrypt SSL certificate to appear legitimate. The domain was registered through HOSTINGER operations, UAB, and has already triggered alerts from 5 of 95 VirusTotal security vendors, indicating elevated risk of compromise.  This domain was flagged as a generic phishing page targeting users with deceptive login prompts. It was created on July 30, 2025, and despite its recent appearance, it has already begun circulating in threat feeds. The IP address 198.251.84.200 hosts multiple suspicious domains, increasing the likelihood of coordinated malicious activity. Users who visited this site may have unknowingly submitted credentials to attacker-controlled servers.  If you visited uboionline.sbs, cease using any entered credentials immediately. Clear browser cache and cookies, then run a malware scan using trusted antivirus software. Report the domain to your IT team or security provider and avoid interacting with similar domains. Monitor financial and account activity for signs of unauthorized access.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-30 12:20:09
- Registrar: HOSTINGER operations, UAB
- IP: 198.251.84.200

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d21b3b5e-2aeb-4cf4-8a52-0d165db35656
- PhishDestroy: https://phishdestroy.io/domain/uboionline.sbs/
- LLM endpoint: https://phishdestroy.io/domain/uboionline.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/uboionline.sbs/
Last updated: 2026-03-23