108283b[.]cc

This domain, 108283b.cc, is identified as a high-risk phishing site specifically targeting UniCredit Banking users. Analysis confirms the domain was actively impersonating the financial institution, as evidenced by the page title 'My UniCredit Banking' and its classification as generic_phishing. The domain is currently offline, though prior activity indicates a deliberate attempt to harvest credentials or financial information from unsuspecting victims. Infrastructure analysis reveals the domain was registered through NameSilo, LLC on September 6, 2025, and resolved to the IP address 178.16.54.253, hosted on AS202412 (Omegatech LTD) in the Netherlands. Detection metrics indicate significant malicious activity, with 17 of 95 security vendors on VirusTotal flagging the domain as phishing. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB. No SSL certificate was present, further reducing its legitimacy and increasing detection likelihood by security tools. The domain has since been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations and individuals are advised to monitor for unauthorized access attempts, particularly those targeting financial accounts. Network administrators should ensure blocklist updates include this domain and its associated IP to prevent future access. Users who may have entered credentials on this site should immediately reset passwords and enable multi-factor authentication on all financial accounts.