ublack[.]me

This domain is flagged for elevated risk due to targeted credential theft phishing, specifically impersonating Uber authentication portals. Analysis indicates the infrastructure was designed to harvest user login credentials by mimicking legitimate Uber login pages, a tactic commonly associated with account takeover and fraud operations. Infrastructure analysis reveals the domain ublack.me was registered on July 09, 2025, through Key-Systems GmbH. It resolves to the IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335). The domain appears on two security blocklists and is flagged by 17 out of 95 security vendors on VirusTotal. Detection engines PhishDestroy and PhishingDB have blocked this domain. No SSL certificate was observed, increasing the likelihood of interception during credential transmission. The page title explicitly displays 'UBER,' confirming brand impersonation. Mitigation requires immediate domain takedown coordination with the registrar and hosting provider. Network-level blocking of 188.114.96.3 is recommended for organizations to prevent access. End users should be alerted to verify domain authenticity before entering credentials, particularly on pages lacking HTTPS. Security teams should monitor for credential reuse across corporate systems and enforce multi-factor authentication to mitigate account compromise risks associated with stolen Uber credentials.