uk43webdesk[.]us

Analysis of the domain uk43webdesk.us confirms its classification as an active credential phishing site, as indicated by multiple security blocklists and infrastructure characteristics. Registered on April 13, 2026, through Dynadot Inc, the domain currently resolves to the IP address 188.114.96.3, which is associated with Cloudflare, Inc. in Canada. The domain is protected by Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which are commonly used to obfuscate malicious infrastructure and evade detection. Nameservers anna.ns.cloudflare.com and zahir.ns.cloudflare.com further confirm the reliance on Cloudflare's network. The domain is flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is assigned a trust score of 0/100 by Gridinsoft, indicating a high-risk classification. The SSL certificate is issued by Let's Encrypt (E7), a common choice for both legitimate and malicious domains due to its accessibility. At the time of assessment, the domain returns an HTTP 525 status, suggesting a potential SSL handshake failure or deliberate misconfiguration to hinder analysis. The page title, 'Website uk43webdesk.us is ready. The content is to be added,' implies that the domain is either in a preparatory stage or intentionally left blank to avoid immediate detection. While the specific target or brand being impersonated is not evident from the available data, the domain is explicitly categorized as a credential phishing site. Defenders should treat this domain as hostile and implement blocking measures at the DNS, IP, and certificate levels. Given its active status and presence on multiple blocklists, organizations are advised to monitor for any connections to this domain within their networks and investigate any associated activity as potentially malicious. Further analysis of the domain's content, once populated, may provide additional context regarding its intended targets or phishing kit in use.