c[.]carlislepremiumsavings[.]co[.]uk

The domain c.carlislepremiumsavings.co.uk was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IP address 107.172.61.186, which belongs to AS36352 (HostPapa) and is geolocated in the United States. The site presented the page title "Carlisle Premium Savings || Banking services," suggesting an attempt to impersonate a financial institution, although no further content analysis is available. The SSL certificate in use is identified as R10, indicating a low‑trust rating.

Reputation services provide extremely low scores: Gridinsoft assigns 0 / 100 and Scamadviser 1 / 100, both reflecting a high likelihood of malicious intent. VirusTotal analysis shows that three of ninety‑three scanning engines flagged the domain, confirming the presence of suspicious elements. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. No additional evidence such as Safe Browsing, OTX, or registrar details was supplied.

Given the combination of a recent registration, low‑trust SSL, poor reputation scores, detection by multiple vendors, and inclusion on blocklists, the domain should be considered a confirmed generic phishing infrastructure. Defensive teams are advised to add the domain and its associated IP address to deny‑list rules, monitor for any re‑hosting attempts, and ensure that email gateways block messages referencing this domain. Continuous observation of the host range owned by AS36352 is recommended, as attackers often reuse the same hosting provider for related campaigns.