# Phishing sites impersonating Govuk

PhishDestroy has recorded 16 phishing domains impersonating Govuk since 2025-12-01, 0 of them in the last 30 days. The most used registrars are Aceville and Dominet (HK); the most common TLDs are .icu and .vip. Open Govuk only from its official app or a saved bookmark.

16Domains, all time

0Last 30 days

1Online at last check

1Confirmed takedowns

## New domains in the last 90 days

Govuk phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Govuk site

Words most often added to the brand in reported domains: gov, paying, subsidy, winters, cons, cpgtestwebapp, dwpukt, dwpukd, dwpukc, dwpuas.
- Type the address yourself or use a bookmark; phishing links for Govuk arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Govuk does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Govuk phishing domains

The 16 most recently detected domains impersonating Govuk
Domain | First detected | Status at last check | Registrar | 
[gov.uk-dwpukt.icu](https://phishdestroy.io/domain/gov.uk-dwpukt.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpukd.icu](https://phishdestroy.io/domain/gov.uk-dwpukd.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpukc.icu](https://phishdestroy.io/domain/gov.uk-dwpukc.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpuas.icu](https://phishdestroy.io/domain/gov.uk-dwpuas.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpuan.icu](https://phishdestroy.io/domain/gov.uk-dwpuan.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpuak.icu](https://phishdestroy.io/domain/gov.uk-dwpuak.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpuah.icu](https://phishdestroy.io/domain/gov.uk-dwpuah.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpuac.icu](https://phishdestroy.io/domain/gov.uk-dwpuac.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpliu.icu](https://phishdestroy.io/domain/gov.uk-dwpliu.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwplis.icu](https://phishdestroy.io/domain/gov.uk-dwplis.icu/) | 2026-06-12 | Offline | Aceville | 
[gov.uk-dwpcae.icu](https://phishdestroy.io/domain/gov.uk-dwpcae.icu/) | 2026-06-12 | Offline | Aceville | 
[cpgtestwebapp.azurewebsites.net](https://phishdestroy.io/domain/cpgtestwebapp.azurewebsites.net/) | 2026-06-10 | Online | Microsoft Azure | 
[govuk-cons-uk.github.io](https://phishdestroy.io/domain/govuk-cons-uk.github.io/) | 2026-05-21 | Taken down | GitHub | 
[uk.paying-lp.vip](https://phishdestroy.io/domain/uk.paying-lp.vip/) | 2026-02-26 | Offline | — | 
[uk.paying-vd.vip](https://phishdestroy.io/domain/uk.paying-vd.vip/) | 2026-02-26 | Offline | — | 
[gov.subsidy-winters.cyou](https://phishdestroy.io/domain/gov.subsidy-winters.cyou/) | 2025-12-01 | Offline | Dominet (HK) | 

[All 16 Govuk reports](https://phishdestroy.io/domain/?brand=Govuk)

## Where they are registered and hosted

### Registrars

- [Aceville](https://phishdestroy.io/registrar/aceville/)11
- [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)1
- GitHub1
- Microsoft Azure1

### Top-level domains

- [.icu](https://phishdestroy.io/tld/icu/)11
- [.vip](https://phishdestroy.io/tld/vip/)2
- [.cyou](https://phishdestroy.io/tld/cyou/)1
- [.io](https://phishdestroy.io/tld/io/)1
- [.net](https://phishdestroy.io/tld/net/)1

### Hosting networks

- Tencent Building, Kejizhongyi Avenue11
- TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 2
- CLOUDFLARENET, US1
- Fastly, Inc.1
- Microsoft Corporation1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Govuk; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/govuk/