uvrisawp[.]cc

Analysis of the domain uvrisawp.cc indicates it was a phishing infrastructure targeting users of FASTPANEL, as evidenced by the page title 'FASTPANEL' captured before the site was taken offline. The domain was registered on February 21, 2026, and resolved to IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). At the time of assessment, seven out of ninety-three security vendors on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist, reinforcing its classification as a threat.

The SSL certificate was issued by WE1, a provider commonly used for both legitimate and malicious domains, offering no definitive signal on its own. The domain's current status is offline, blocked by PhishDestroy, which suggests active mitigation efforts. Defenders should treat this domain as confirmed malicious infrastructure, particularly for campaigns impersonating FASTPANEL.

While the exact phishing mechanics remain unconfirmed due to the site's offline status, the combination of a targeted page title, detection by multiple security vendors, and blocklist inclusion provides sufficient evidence for classification as a phishing threat. Network defenders are advised to block the domain and associated IP, monitor for related indicators, and review logs for connections to 188.114.96.3 or uvrisawp.cc between February and July 2026.