uwlglb[.]com

PhishDestroy’s investigation classifies uwlglb.com as an elevated-risk credential harvesting domain. This site is actively impersonating a legitimate service to steal login credentials, posing significant risk to unwitting visitors.

PhishDestroy’s telemetry confirms the threat: VirusTotal lists the domain as malicious with 3/95 detection engines flagging the page; the domain was registered on 22 October 2025 via OwnRegistrar, Inc. and resolves to 37.49.229.75; the Let’s Encrypt SSL certificate adds a veneer of legitimacy, but threat intelligence shows no presence on major public blocklists, indicating a recent deployment targeting unsuspecting users.

Mitigation requires immediate action: organizations should block access to 37.49.229.75 and uwlglb.com at the firewall, disable inbound SSL inspection for this IP to prevent certificate spoofing, and warn employees via phishing-awareness training to avoid entering any credentials on suspicious login portals. Domain registrants should monitor for newly created lookalike domains and update detection rules accordingly.