gov[.]uk-dwpmr[.]icu

The domain gov.uk-dwpmr.icu was registered on June 12, 2026 through Aceville Pte. Ltd. and resolves to the IP address 43.130.72.207. VirusTotal has logged detections from 12 of 91 security vendors, indicating that the domain is already being flagged by multiple scanners. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service.

No public information about an SSL certificate, HTTP response codes, or page title is currently available, and the site’s content has not been publicly analysed. The limited visibility suggests an early‑stage infrastructure that relies on quick registration and rapid deployment of phishing payloads. Defenders should add the domain to network‑level deny lists, update DNS filtering rules, and monitor traffic to the associated IP for any anomalous activity.

Continuous re‑scanning of the host is advised, as additional detection signatures may emerge. Because the registrar information is publicly known, threat‑intel teams may also consider reach‑out to Aceville Pte. Ltd. for potential abuse reporting. Monitoring for related domains that share the same registration patterns or IP range can help pre‑empt further campaigns.