uk[.]parking-is[.]vip

This domain, uk.parking-is.vip, is actively engaged in credential theft through brand impersonation of GOV.UK, the official portal of the UK government. The site presents itself as a legitimate government service, exploiting trust in the GOV.UK brand to harvest sensitive login credentials from unsuspecting users. Current analysis confirms the domain remains operational and continues to pose a significant threat to individuals and organizations relying on government digital services. Infrastructure analysis reveals critical indicators of malicious intent. The domain is flagged by 13 of 95 security vendors on VirusTotal, with an additional presence on one security blocklist. It resolves to the IP address 151.101.64.144, hosted on AS54113 (Fastly, Inc.) in the United States, despite its UK-themed branding. The domain was registered on December 22, 2025, through Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn), a registrar frequently associated with high-risk domains. Notably, the site lacks an SSL certificate, a red flag for any platform handling user credentials. The page title, 'Welcome to GOV.UK,' further corroborates the impersonation strategy, mimicking the authentic government portal to deceive visitors. The risk level for uk.parking-is.vip is classified as high due to its active status, lack of encryption, and direct targeting of sensitive credentials. Organizations and individuals are advised to block access to this domain immediately and implement network-level controls to prevent user interaction. Security teams should monitor for connections to the IP address 151.101.64.144 and the associated AS number, as these may indicate compromise or attempted credential theft. Users who may have interacted with the domain should reset passwords for any accounts accessed during the exposure window and enable multi-factor authentication where available. Given the domain's recent registration and active impersonation of a trusted brand, continued vigilance and proactive threat hunting are recommended to mitigate potential fallout from this campaign.