gov[.]uk-dwpuki[.]icu

Analysis indicates that the domain gov.uk-dwpuki.icu was registered on June 12, 2026 through Aceville Pte. Ltd. The domain resolves to the IPv4 address 43.130.72.207, which is currently associated with an active hosting service. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy community feed. VirusTotal has recorded 13 of 91 security vendors flagging the domain as malicious, suggesting a moderate level of detection across commercial scanners.

No additional contextual information such as page title, SSL certificate details, or HTTP response codes is presently available, leaving the exact phishing payload or lure unconfirmed. The presence on blocklists and the detection rate on VirusTotal together imply that the domain is being used for malicious phishing attempts, consistent with the generic phishing classification supplied. Defenders should consider adding the domain to internal blocklists, denying outbound connections to the resolved IP address, and monitoring DNS queries for the domain.

Network sensors should be tuned to alert on any HTTP or HTTPS requests to the host, and endpoint security solutions should be updated to include the domain in their reputation feeds. Continuous re‑evaluation is recommended as additional telemetry, such as page content or SSL certificate data, may become available and refine the risk posture.