uketfs[.]co[.]uk

uketfs.co.uk was observed serving a page whose title reads “Search - Microsoft Bing”, indicating an attempt to impersonate Microsoft services. The domain was registered on 9 October 2025 through Dynadot LLC and uses the authoritative nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. DNS resolution points to IP address 23.33.40.155, which belongs to AS20940 operated by Akamai International B.V. and is geolocated in the United States. No TLS certificate is presented, meaning the site is delivered over plain HTTP, which is consistent with many low‑cost tech‑support scams.

Threat intelligence platforms have flagged the domain: 13 of 95 VirusTotal scanners identified malicious behavior, and the site appears on a single external blocklist. It has also been added to the PhishDestroy blocklist. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk. The site is classified as a “Tech Support Scam” targeting Microsoft users, and the overall risk level is elevated.

The domain is currently offline, but historical evidence suggests it was active long enough to be indexed by security vendors. Defenders should continue to block traffic to 23.33.40.155 and to uketfs.co.uk at the DNS level, monitor for any re‑registration or replica infrastructure, and update endpoint protection signatures with the observed VirusTotal detections. Because the site lacked HTTPS, network‑level inspection of clear‑text HTTP can reveal further IOC patterns if the site reappears. Ongoing watch of Dynadot‑registered domains that resolve to the same Akamai ASN is recommended to pre‑empt similar campaigns.