gov[.]uk-dwpuaz[.]icu

The domain gov.uk-dwpuaz.icu was registered on June 12, 2026 through the registrar Aceville Pte. Ltd. Early indicators show that it is actively being used for a generic phishing campaign, as reflected by its elevated risk rating and active status. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy mitigation service, suggesting that at least one trusted threat‑intelligence feed has identified malicious intent. VirusTotal analysis reports that 14 of 91 scanned security vendors flagged the domain, providing a modest but notable detection consensus that corroborates the blocklist observation.

No additional infrastructure details such as hosting IP, ASN, or TLS configuration are currently available in the intelligence set, limiting deeper attribution. The absence of page‑title or content metadata means that the specific lure or credential‑harvesting technique employed by the site cannot be confirmed at this time. Defenders should prioritize adding the domain to local deny lists and ensure that network‑level filtering solutions incorporate the PhishDestroy blocklist entry.

Continuous monitoring of VirusTotal and other multi‑engine scanners is advised to capture any change in detection rates, which may indicate payload evolution or increased confidence from vendor analyses. Organizations should also verify that endpoint protection agents are configured to block URLs resolved to this domain and that user education programs reference the recent creation date as a heuristic for spotting newly‑minted phishing infrastructure.