gov[.]uk-dwpns[.]icu

Analysis of the domain gov.uk-dwpns.icu indicates an active generic phishing threat with an elevated risk rating. The domain was registered through Aceville Pte. Ltd. on June 12, 2026 and has already appeared on a security blocklist, confirming that it is being monitored by external threat‑sharing services. VirusTotal scans show that 14 of 91 security vendors have flagged the domain as malicious, providing a modest but notable detection rate that aligns with the elevated risk assessment.

The blocklist entry is corroborated by PhishDestroy, which has actively blocked the domain in its phishing mitigation suite. No additional intelligence such as IP address, hosting details, SSL certificate information, or page title has been released at this time, leaving the underlying infrastructure largely uncharacterized. Given the current evidence, defenders should prioritize immediate blocking of gov.uk-dwpns.icu across perimeter firewalls, DNS filtering solutions, and endpoint protection platforms.

Continuous monitoring of the domain’s activity through threat‑intel feeds and periodic re‑scans on VirusTotal are recommended to capture any changes in detection posture. Organizations should also review inbound email filtering rules to mitigate potential phishing attempts that may reference this domain, especially those targeting UK government or welfare‑related communications. The limited but consistent indicators—registration data, blocklist presence, and multi‑vendor detections—justify treating the domain as a high‑confidence phishing vector until further contextual data becomes available.