squad-2-building-control[.]azurewebsites[.]net

This domain poses an elevated risk as it specifically impersonates the UK Government's building control approval service, a classic brand impersonation tactic used to harvest sensitive credentials from applicants. The threat is not just a generic phishing site but a carefully crafted replica of a legitimate government portal, designed to deceive users into submitting personal and financial information under the guise of official business.

Technical indicators paint a clear picture of malicious intent. VirusTotal data shows 16 out of 95 security vendors flagging this domain as malicious, a significant detection rate. The domain was created on February 22, 2026, and registered through MarkMonitor, Inc., a legitimate registrar often abused by phishers. It resolves to IP address 20.90.134.23 and uses a Microsoft Azure SSL certificate (Microsoft Corporation / Microsoft Azure RSA TLS Issuing CA 08), lending a false sense of security. The domain appears on one security blocklist and has been taken offline, but similar domains may reappear. The page title, 'Home – Apply for building control approval for a higher-risk building – GOV.UK Prototype Kit', reveals the exact service being impersonated.

Users should never interact with this domain. If encountered, do not click any links or enter credentials. Report the URL to authorities like the NCSC and use PhishDestroy's verification tool to check similar domains. For legitimate UK building control applications, always navigate directly to the official GOV.UK website. Enable multi-factor authentication on government accounts and monitor for suspicious activity if any details were inadvertently shared.