uber-clone-webapp-ten[.]vercel[.]app

The domain uber-clone-webapp-ten.vercel.app was registered on June 1, 2026 through Vercel Inc. and resolves to the Amazon‑owned address 216.198.79.131 located in the United States (AS16509). The site returns HTTP 200 and the page title is "Uber", indicating a credential‑phishing campaign aimed at Uber accounts. TLS is provided by Google Trust Services (WR1), confirming a valid HTTPS connection. Reputation services flag the domain as high‑risk: Google Safe Browsing lists it under "SOCIAL_ENGINEERING", 21 of 91 VirusTotal scanners raise alerts, and it appears on a security blocklist that has already been enforced by PhishDestroy. The Gridinsoft trust score is 0/100 and the domain is currently marked as active. No nameserver records were observed. Details of the phishing page content, form fields, or data‑exfiltration mechanisms are not available from the supplied intelligence, so the exact payload remains unknown. Defenders should block the domain at DNS and network layers, monitor for outbound connections to the associated IP address, and update detection rules to flag any HTTP requests that reference the "Uber" page title from this host. Continuous re‑scanning is recommended to capture any changes in behavior or new malicious indicators.