fugabelab[.]xyz

The domain fugabelab.xyz is identified as a high‑risk generic phishing infrastructure that remains active as of the report date, July 26, 2026. Registration records show that the domain was acquired through Name.com, Inc., and its authoritative name servers are ns1.vercel-dns.com and ns2.vercel-dns.com, indicating reliance on Vercel’s DNS services. Threat intelligence places the domain on a single security blocklist and confirms that it is actively blocked by the PhishDestroy filtering service.

VirusTotal analysis reports that five of ninety‑one scanned security vendors have flagged the domain, reinforcing the notion of malicious intent despite a modest detection count. An HTTP 308 response code is observed, suggesting that the site is configured to redirect clients, a behavior often employed by phishing operators to funnel victims to malicious endpoints. No publicly available page title, SSL certificate details, or hosting IP address have been disclosed, leaving those aspects of the infrastructure unverified at this time.

Defenders should prioritize adding fugabelab.xyz to network and email filtering rules, enforce DNS blocklists that include the domain, and monitor for any outbound connections to the associated Vercel DNS endpoints. Continuous re‑evaluation is advised, as the modest VirusTotal detection count may evolve if additional security vendors assess the site. Organizations should also consider reviewing any recent authentication attempts that might involve the domain, given its classification as a generic phishing campaign targeting credential capture.