gov[.]uk-dwplsi[.]icu
As of July 29, 2026, the domain gov.uk-dwplsi.icu is flagged as a potential generic phishing threat. This domain was registered through Aceville Pte. Ltd. on June 12, 2026, indicating a relatively recent creation, which is often characteristic of malicious domains. The domain appears on one security blocklist and is blocked by PhishDestroy, suggesting that it has been identified as a threat by some security services.
However, it is noted that only 11 out of 91 security vendors on VirusTotal have flagged this domain, which may indicate a divided opinion on its malicious intent or a less widespread recognition of the threat. The exact content and purpose of the site have not yet been fully analyzed, but the elevated risk level and active status suggest that it is currently being used for nefarious activities. Infrastructure analysis reveals no additional details about hosting or IP information.
Defenders should remain vigilant and consider blocking this domain to prevent potential phishing attacks. The domain's association with government-related terms in its name may be an attempt to deceive users into believing it is an official site, which could lead to the compromise of sensitive information. Given the available evidence, it is recommended that network administrators and security teams monitor traffic to this domain and educate users on the risks of visiting unverified government-related websites.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
SHORTDOT ZONE · PUBLIC EVIDENCE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: uk-dwplsi.icu
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain uk-dwplsi.icu behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive