uptimereal2[.]com

PhishDestroy identifies uptimereal2.com as an active phishing domain that masquerades as a legitimate Plesk Obsidian 18.0.76 login portal in order to trick users into submitting their administrative credentials. The threat type is classified as generic_phishing, and the risk level is rated high due to the direct potential for account takeover and subsequent exploitation of hosted services.

This domain was flagged by 3 out of 95 security vendors on VirusTotal, indicating limited but existing recognition of its malicious nature. It resolves to IP address 178.16.54.246, is registered through OwnRegistrar, Inc., and went live on April 8, 2026. Although the domain holds a valid Let’s Encrypt SSL certificate intended to bolster legitimacy, the combination of recent creation date, registrar choice, and low detection ratio suggests a newly activated campaign with evasive infrastructure. The Plesk page title is a decoy used to lure system administrators and hosting customers into a false sense of security.

Users should avoid accessing or entering credentials on uptimereal2.com and may consider updating local blocklists or firewalls to block 178.16.54.246. If login credentials were entered, immediately change passwords on all related accounts and enable multi-factor authentication. Report the domain to your email provider and security teams to aid in wider takedown efforts.