dwominecraft[.]co[.]uk

Analysis of dwominecraft.co.uk indicates the domain is currently active and resolves to a HTTP 301 redirect. The domain is delegated to ns1.namecity.com and ns2.namecity.com, both operated by Namecity. Registration details show the domain was provisioned through Easyspace Ltd, a registrar commonly used for legitimate sites, but this does not mitigate the observed malicious behavior. VirusTotal has processed the domain with 91 security vendors; none reported a detection, which reflects the current lack of known payload signatures rather than a confirmation of safety.

The domain is listed on one external blocklist and has been explicitly blocked by the PhishDestroy service, confirming that security communities consider it abusive. No public Safe Browsing or OTX entries were identified, and no SSL certificate information or page title has been disclosed, leaving the exact content of the landing page unverified. The primary uncertainty surrounds the specific phishing vector employed—while the classification as generic phishing is supplied, the target brand, credential collection method, and hosting infrastructure remain unknown.

Defenders should monitor DNS resolutions for the listed namecity nameservers, enforce blocklist rules that include this domain, and consider adding it to internal URL filtering policies. Given the active redirect and blocklist presence, any inbound traffic to dwominecraft.co.uk should be denied, and incident response teams should investigate any logs showing connections to the domain for potential credential compromise. Continuous re‑evaluation is advised as additional intelligence, such as SSL details or page content, may emerge.