litere[.]uvt[.]ro

Analysis of litere.uvt.ro indicates an active high‑risk generic phishing operation. The domain was registered on March 27, 2026 through Netprotect SRL and resolves to the IPv4 address 85.120.206.130, which maps to the West University of Timișoara in Romania. Infrastructure inspection shows the site runs on Apache HTTP Server with a Let's Encrypt R13 certificate and returns HTTP 307 redirects. Detected web technologies include WordPress, MySQL, PHP, Yoast SEO, UserWay, Swiper, and Lightbox, suggesting a standard content management stack. Email infrastructure uses Google Workspace MX records (aspmx.l.google.com priority 1, alt1.as... priority 5). The domain is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal reports four of ninety‑four scanners flagging the domain, reinforcing the malicious assessment. The page title references the Faculty of Letters, History, Philosophy and Theology, but no further content analysis is available. Defenders should block DNS resolution and HTTP traffic to the domain and associated IP, monitor outbound connections for the listed MX hosts, and enforce credential hygiene for any communications that may reference the university. Ongoing observation is advised to capture any evolving payloads or additional infrastructure.