uk42webdesk[.]us

The domain uk42webdesk.us has been confirmed as a high-risk generic_phishing site. No specific brand impersonation or drainer kit was detected, but the domain's infrastructure and online behavior indicate a strong likelihood of phishing activities. The domain is currently offline, which may suggest that the operators have temporarily taken it down to evade detection or are preparing for a new campaign.

Infrastructure analysis reveals that uk42webdesk.us resolves to the IP address 188.114.96.3 and was registered through Dynadot Inc on April 13, 2026. The site has a Gridinsoft trust score of 0/100, indicating a very low level of trust. It appears on three known security blocklists and is blocked by MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Let's Encrypt, a common choice for low-cost or temporary phishing sites. Additionally, 14 out of 95 security vendors on VirusTotal have flagged this domain, further corroborating its malicious nature.

The current status of uk42webdesk.us is offline, which may reduce immediate risk to users. However, the domain has not been permanently decommissioned, and there is a possibility of it being reactivated in the future. Security researchers and organizations are advised to monitor this domain for any signs of resurgence. Users should avoid interacting with this domain and report any encounters to their respective security teams. The remaining risk is high, as the infrastructure used can be quickly reconfigured to host new phishing pages.