ugu-iota[.]vercel[.]app

The domain ugu-iota.vercel.app was identified as a generic phishing site. The site employed deceptive tactics typical of phishing operations, though specific brand targeting or drainer kits are not detailed in the known intelligence. The domain's primary function was to mislead users into providing sensitive information under false pretenses.

Technical analysis of ugu-iota.vercel.app reveals a VirusTotal detection score of 15 out of 95 security vendors, indicating a significant level of threat recognition across the industry. The domain was registered via Tucows Domains Inc. and resolves to the IP address 216.198.79.3, which is located in the US, under the autonomous system AS16509 associated with Amazon.com, Inc. Notably, the domain was created on February 21, 2026. Despite the site's SSL certificate being issued by Google Trust Services / WR1, the domain is flagged and blocked by PhishDestroy and PhishingDB, and appears on two distinct security blocklists. The page currently displays a title 'Deployment Unavailable', suggesting the site is inactive.

Currently, ugu-iota.vercel.app is offline, reducing its immediate threat level. Nonetheless, the fact that it appears on multiple security blocklists and is recognized by several security vendors as a phishing site implies a potential for reactivation or replication elsewhere. Users and network administrators should ensure robust security measures are in place, such as maintaining up-to-date blocklists and employing monitoring tools to detect any future resurgence of similar domains. Continuous vigilance is recommended to preempt any further exploitation attempts by cyber threat actors.