ubs-financial[.]vercel[.]app

On July 29, 2026, analysis of the domain ubs-financial.vercel.app indicates that it is actively used in a phishing campaign. The domain resolves to the IPv4 address 64.29.17.131, which is owned by the Vercel hosting platform. Registration records show the domain was created on 28 January 2020 and the registrar listed is Vercel, a provider that supplies automated DNS for web applications.

VirusTotal has recorded 11 detections out of 91 scanning engines, demonstrating that a minority of security products recognize malicious behavior associated with this host. The domain is listed on one external security blocklist and is explicitly blocked by the PhishDestroy filtering service, confirming that at least one threat‑intelligence feed has classified it as abusive. No additional data such as SSL certificate details, HTTP status codes, page title, or content analysis is currently available, leaving the precise phishing payload and targeted brand unverified.

The observed evidence suggests that the infrastructure is being leveraged to host malicious pages, and the elevated risk rating aligns with the detection history. Defenders should add ubs-financial.vercel.app to network and endpoint blocklists, monitor DNS queries for the associated IP address, and consider proactive URL filtering to prevent user access. Continuous re‑assessment is advised, as further reconnaissance may reveal additional indicators such as malware downloads or credential‑harvesting forms.