gov[.]uk-dwpuac[.]icu

The domain gov.uk-dwpuac.icu was registered on June 12, 2026 through the registrar Aceville Pte. Ltd. and currently resolves to the IPv4 address 43.130.72.207. Threat intelligence classifies the site as a generic phishing operation with an elevated risk rating and an active status as of the report date, July 29, 2026. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

VirusTotal analysis shows that 15 of 91 security vendors have flagged the domain, indicating a measurable detection consensus among scanning engines. No additional public threat‑intel sources such as OTX, Safe Browsing, or SSL certificate details are available in the current dataset, and the page title or content has not been disclosed. Given the confirmed registrar attribution, IP resolution, blocklist presence, and multi‑vendor detections, defenders should prioritize immediate DNS or firewall blocking of 43.130.72.207 and the domain name itself.

Continuous monitoring for any new indicators, such as changes in hosting, additional blocklist listings, or increased detection counts, is recommended to adapt defenses as the campaign evolves. Organizations that rely on UK government services should remain vigilant for unsolicited communications that reference official sites, as the domain’s naming pattern mimics legitimate government URLs.