gov[.]uk-dwpcae[.]icu

Analysis of gov.uk-dwpcae.icu shows the domain was registered on 12 June 2026 through Aceville Pte. Ltd. The domain resolves to the IPv4 address 43.130.72.207. VirusTotal records indicate that 15 of 91 scanned security vendors have flagged the domain as malicious, which aligns with its appearance on at least one public blocklist. The domain is also listed by PhishDestroy, a known phishing mitigation service.

No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, or trust‑score data have been published for the domain, and page‑title information is not currently available. The limited infrastructure footprint – a single IP address and a recent registration – is typical of short‑lived phishing infrastructure used to impersonate government services. Defenders should add the domain and its resolved IP address to blocklists and firewall deny lists, monitor DNS traffic for queries to the domain, and include the IP in any threat‑intel feeds used for network filtering.

Because the domain is actively flagged by multiple vendors and by PhishDestroy, organizations handling UK government communications should treat any inbound traffic from this domain as suspicious and enforce strict verification of any credential‑submission requests that reference it. Ongoing observation is recommended to capture any emerging payloads or redirects that may be associated with the domain.