uk[.]parking-tl[.]vip

Analysis of the domain uk.parking-tl.vip shows that it was registered on December 20 2025 through Alibaba Cloud Computing Ltd. d/b/a HiChina. The authoritative nameservers are dns25.hichina.com and dns26.hichina.com, indicating that the registrar’s DNS infrastructure is being used. DNS resolution points to the IPv4 address 170.106.159.17, which is hosted in the United States under AS132203 (Tencent Building, Kejizhongyi Avenue). No TLS certificate was presented when the host was queried, meaning the site operated only over HTTP.

The page title returned by the server is exactly “uk.parking-tl.vip”, providing no additional context about the intended victim brand. The site was classified as a banking phishing page, and its current status is offline, suggesting the operators have taken the infrastructure down or it was seized. Security‑monitoring feeds show the domain appears on a single blocklist and is actively blocked by the PhishDestroy service. Gridinsoft’s trust scoring assigned a value of 0 out of 100, reflecting an extreme lack of credibility.

VirusTotal analysis recorded 15 detections out of 95 scanning engines, confirming that multiple antivirus and URL‑reputation services consider the domain malicious. The combination of a recent registration, low‑reputation trust score, multiple vendor detections, and the absence of encryption are consistent with a short‑lived phishing campaign targeting banking credentials. Defenders should add the domain and its resolving IP address to internal blocklists, monitor for any re‑use of the same nameservers or IP range, and ensure that web‑proxy and DNS filtering solutions are configured to deny traffic to uk.parking-tl.vip. Because the site is presently offline, active response actions such as sink‑holing are not applicable, but continued vigilance is advised in case the operators redeploy the payload on a new host.