woodforestdefbk[.]live

The domain woodforestdefbk.live was registered on May 16, 2026 through Global Domain Group LLC and is currently resolving to IP 163.61.188.5, which geolocates to the United States (MIT). DNS is served by four LyteHosting name servers (dns1‑dns4.lytehosting.com). The sole MX record points to the domain itself (priority 0), and the web server returns HTTP 200 with a TLS certificate issued by Let’s Encrypt (R12). The page title advertises “Wood Forest – Dedicated to innovating, simplifying, and humanizing digital banking,” but no further content analysis is available. Threat intelligence flags the site as a credential‑phishing operation; it is listed on one blocklist, has been reported in a single AlienVault OTX pulse, and is actively blocked by PhishDestroy. Reputation services show a Gridinsoft trust score of 1 / 100, and VirusTotal records 13 of 92 scanners flagging the domain. These indicators collectively suggest a high‑risk, active phishing campaign. Defenders should add the domain and its IP to outbound‑web filters, monitor DNS queries for the listed name servers, and consider blocking SMTP traffic to the domain’s MX. Continuous re‑scanning is advised to capture any changes in malicious payloads or additional detections.