gov[.]uk-dwpuak[.]icu

Analysis of the domain gov.uk-dwpuak.icu indicates an elevated‑risk, active generic phishing operation. The domain was registered on June 12, 2026 through the registrar Aceville Pte. Ltd. and resolves to the IPv4 address 43.130.72.207. It appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that threat‑intelligence sources have identified malicious activity associated with this host. VirusTotal reports that 14 of 91 scanned security vendors flag the domain as malicious, providing independent corroboration of its threat status.

No additional infrastructure details such as ASN, hosting provider, SSL certificate characteristics, or HTTP response codes are presently available in the intelligence set, leaving those aspects unverified. Likewise, the page title, content, and any brand‑specific impersonation have not been disclosed, so the exact lure employed by the site cannot be described beyond the generic phishing classification. Defenders should prioritize immediate blocking of the domain at network perimeter and endpoint filters, and incorporate the observed IP address 43.130.72.207 into black‑list rules.

Continuous monitoring of the host for changes in DNS resolution, new blocklist appearances, or additional vendor detections is advised. Organizations that rely on email or web gateways should ensure that phishing‑specific detection signatures are up‑to‑date, and that any user‑reporting mechanisms are tuned to capture attempts that reference the gov.uk‑dwpuak.icu URL. Given the recent creation date and the presence of multiple vendor detections, the domain should be treated as a high‑confidence indicator of phishing activity until further forensic evidence either confirms or refutes its malicious purpose.