gov[.]uk-dwpilu[.]icu

The domain gov.uk-dwpilu.icu was registered on June 12, 2026 through the registrar Aceville Pte. Ltd. Analysis of public threat‑intelligence feeds shows that the domain is currently flagged by multiple security controls. VirusTotal reports that 16 of 91 scanning engines have identified malicious activity associated with the domain, indicating a notable detection rate. Google Safe Browsing classifies the site as a social engineering threat, and the domain appears on at least one external blocklist. An additional blocklist, PhishDestroy, has also listed the domain as active.

Network resolution points to the IPv4 address 43.130.72.207, which is the sole host observed for this domain. No further infrastructure details such as ASN, geographic location, or SSL certificate information have been disclosed in the available data. The specific phishing campaign details, including the targeted brand or page content, have not been published, so the exact lure employed remains unknown.

Defenders should treat the domain as high‑risk: incorporate the domain and its IP address into network‑level deny lists, update endpoint protection signatures to include the 16 detections reported by VirusTotal, and monitor for any outbound connections to the host. Continuous re‑evaluation is advised, as additional telemetry may reveal the phishing payload or targeted services. Vigilance against this indicator is recommended until the domain is taken down or further remediation actions are confirmed.