sub[.]abokidevelopers[.]com

The domain sub.abokidevelopers.com was identified as a phishing site engaged in brand impersonation, specifically targeting UPS. This domain posed an elevated risk by attempting to deceive users through impersonation tactics. As of now, sub.abokidevelopers.com has been taken offline, reducing its immediate threat, but users who interacted with the site should remain cautious regarding their credentials and personal information.

Technical analysis shows that sub.abokidevelopers.com was registered through NameCheap, Inc. on February 21, 2026. The domain resolved to the IP address 192.3.190.187, located in the US under AS36352 HostPapa. It used an SSL certificate issued by R10 and was configured with nameservers dns101.registrar-servers.com and dns102.registrar-servers.com. VirusTotal reported 1 of 95 vendors, including SOCRadar, flagged the site as malicious, and it appeared on 1 security blocklist (PhishDestroy). Google Safe Browsing did not flag the site, and the Gridinsoft trust score was 0/100. The observed page title referenced ArewaBillPlus, unrelated to UPS, which may have been used to further mislead victims.

If users entered UPS credentials or sensitive information on sub.abokidevelopers.com, they should immediately change passwords associated with their UPS and related accounts, enable two-factor authentication where available, and monitor for unauthorized transactions or communications. Victims are encouraged to report the incident to UPS and appropriate cybersecurity authorities. Staying vigilant for suspicious emails or account activity is recommended after exposure to phishing sites such as sub.abokidevelopers.com.