gov[.]uk-dwpuar[.]icu

On July 29, 2026, the domain gov.uk-dwpuar.icu was identified as part of an active generic phishing campaign. The domain was registered on June 12, 2026 through the registrar Aceville Pte. Ltd., indicating a recent creation window often associated with malicious infrastructure. DNS resolution returns a single IPv4 address, 43.130.72.207, which is currently listed on one public security blocklist.

VirusTotal has recorded 14 of 91 antivirus and URL‑filtering engines flagging the domain as malicious, demonstrating a moderate detection consensus among scanning services. The domain is also blocked by the PhishDestroy feed, providing additional confirmation of its abuse status. No further public intelligence such as Google Safe Browsing, OTX tags, SSL certificate details, or HTTP response data is presently available, leaving the exact payload or lure used by the site unknown.

Defenders should add the domain and its associated IP address to outbound and inbound deny lists, monitor DNS queries for look‑ups to the domain, and ensure that any email filtering solutions incorporate the current detection signatures. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in detection rates, and periodic review of the blocklist entries may reveal new indicators as the campaign evolves.