gov[.]uk-dwpukd[.]icu

Analysis indicates that the domain gov.uk-dwpukd.icu was registered on 12 June 2026 through the registrar Aceville Pte. Ltd. The domain resolves to the IPv4 address 43.130.72.207, which is the only hosting indicator currently available. VirusTotal has recorded 14 positive detections out of 91 scanned security vendors, confirming that a notable fraction of scanners classify the domain as malicious. The domain is listed on a single public security blocklist and is actively blocked by the PhishDestroy service, providing additional evidence of its abusive nature.

No public SSL certificate details, HTTP response codes, or page‑title information have been released, so the surface‑web characteristics remain unverified. The limited detection footprint suggests that the infrastructure is relatively new, consistent with the June 2026 creation date, and may be used for generic phishing campaigns targeting users who trust government‑related URLs. Defenders should update perimeter and DNS filtering policies to deny resolution of gov.uk-dwpukd.icu, incorporate the IP address 43.130.72.207 into network‑level blocklists, and monitor outbound connections for attempts to reach this host.

Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture any evolving payloads. Because the registrar information is public, threat‑intel teams may also pursue WHOIS‑based attribution or abuse reporting with Aceville Pte. Ltd. Until further content analysis is available, the domain should be treated as high‑confidence malicious and proactively blocked.