Análisis de phishing y seguridad de ubnr.cc

The domain ubnr.cc was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IPv6 address 2606:4700:20::681a:8c8, which is hosted by Cloudflare, Inc. (AS13335) in the United States. The site presents a page titled "Solflare" and is classified as a tech support scam that attempts to impersonate Google. Multiple security feeds have flagged the domain: PhishDestroy, ScamSniffer, and Enkrypt have all blocked it, and it appears on three additional blocklists.

VirusTotal scans indicate that two of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of abuse. Reputation services assign low trust scores, with Scamadviser rating the site at 31 out of 100 and Gridinsoft reporting a score of zero, reflecting a high likelihood of fraudulent activity. The SSL certificate associated with ubnr.cc is identified as grade E1, which provides minimal assurance of authenticity.

Although the site is no longer reachable, the observed indicators—hosted on a cloud provider, low trust metrics, a page title unrelated to the targeted brand, and detection by several anti‑phishing platforms—suggest a coordinated attempt to lure victims into a Google‑impersonating tech support scheme. Defenders should continue to block the domain at network perimeters, update URL filtering and threat intelligence feeds with the IPv6 address and associated hostnames, and monitor for any re‑use of the same infrastructure in future campaigns. Incident response teams should also advise users to disregard unsolicited Google‑related support requests and verify communications through official channels.