uk-verno[.]com

PhishDestroy identifies uk-verno.com as an active credential harvesting domain designed to mimic legitimate UK-based services. The site employs a deceptive interface to trick users into submitting sensitive login credentials, including email addresses and passwords. No specific brand or drainer kit association has been confirmed at this stage, though the domain's quick setup and phishing infrastructure suggest a focus on high-volume credential theft campaigns targeting UK internet users.

This domain exhibits several concerning technical indicators. Domain creation occurred on August 13, 2025, with resolution to IP address 192.250.226.92. VirusTotal scans returned 0 detections out of 95 engines as of the time of analysis, indicating low detection by antivirus platforms despite its malicious intent. The domain is registered through NAMECHEAP INC and utilizes a Let's Encrypt SSL certificate to appear legitimate. It currently appears on one security blocklist and is actively blocked by PhishDestroy. Notably, the domain's recent creation and low detection profile suggest it may be part of a rapidly evolving campaign.

uk-verno.com remains active and poses a credible threat to users who may encounter it through phishing emails, compromised advertisements, or typo-squatted links. Response actions include continuous monitoring by PhishDestroy and inclusion on its blocklist. However, the domain's low VirusTotal detection rate highlights the need for caution, as traditional antivirus solutions may not yet recognize the threat. Users are strongly advised to avoid interacting with this domain and to report any encounters to their security teams or through PhishDestroy's reporting channels. The risk remains high due to the domain's active status and potential for rapid expansion into additional campaigns.