gov[.]uk-dwpukb[.]icu

The domain gov.uk-dwpukb.icu was registered on June 12, 2026 through the registrar Aceville Pte. Ltd. and is currently classified as an active, high‑risk phishing resource. Google Safe Browsing has flagged the domain for social engineering, indicating that it is being used to lure users into disclosing credentials or personal information. Independent threat‑intelligence feeds have corroborated this assessment: PhishDestroy has already placed the domain on its blocklist, and it appears on one additional security blocklist used by network‑level defenses.

VirusTotal analysis shows that 14 of 91 security vendors have issued detections against the domain, reinforcing the suspicion of malicious intent. The available intelligence does not include details such as the hosting IP address, SSL certificate status, HTTP response codes, or page title, and no specific brand or service is identified as the target of the impersonation. Consequently, defenders lack concrete indicators of the exact content served by the site, but the convergence of multiple independent signals—Safe Browsing, blocklist inclusion, and multi‑vendor detections—provides sufficient evidence to treat the domain as a confirmed phishing instrument.

Organizations should update perimeter filters to block traffic to gov.uk-dwpukb.icu, ensure endpoint protection solutions are aware of the 14 vendor detections, and monitor for any related activity targeting users. Continued observation is advised to capture any future disclosures of hosting details or payload characteristics that could refine mitigation strategies.