find-ubicacion[.]help

This domain, find-ubicacion.help, is identified as a credential phishing site designed to harvest user login credentials through deceptive web pages. Analysis indicates the site presented a blank page titled 'Página em Branco,' a common tactic to mask malicious intent while awaiting dynamic content injection or redirecting victims to fraudulent login forms. The domain poses an elevated risk due to its recent creation, lack of SSL encryption, and prior resolution to a hosting provider frequently associated with malicious activity. Infrastructure analysis reveals the domain was registered on October 10, 2025, through NameSilo, LLC, a registrar often utilized for short-lived phishing campaigns. It previously resolved to IP address 67.217.59.86, located in the US under AS19318 (Interserver, Inc). Security vendor detections on VirusTotal reached 18 out of 95, with the domain appearing on two blocklists: PhishDestroy and PhishingDB. The absence of an SSL certificate further reduces legitimacy, as modern phishing sites typically employ encryption to evade detection. Users who visited find-ubicacion.help should immediately revoke any entered credentials, particularly for financial or email accounts. Monitor linked accounts for unauthorized activity and enable multi-factor authentication where available. Network administrators are advised to block the domain and its associated IP (67.217.59.86) at the perimeter. Given the domain’s current offline status, continued monitoring for re-emergence under similar naming conventions is recommended, as threat actors often reuse infrastructure patterns.