gov[.]uk-dwpuab[.]icu

The domain gov.uk-dwpuab.icu was registered on 12 June 2026 through Aceville Pte. Ltd. and is currently resolving to the IPv4 address 43.130.72.207. The domain is classified as a generic phishing site and is listed as high‑risk and active as of the report date 29 July 2026. Analytical feeds show that Google Safe Browsing has flagged the domain for social engineering, and the commercial blocklist PhishDestroy includes it among known phishing resources. An additional security blocklist records a single listing for the domain.

VirusTotal has processed the domain and 16 of 91 scanned security vendors have raised detections, indicating a moderate level of consensus among anti‑malware engines. The presence of multiple independent detections, combined with the Safe Browsing flag and blocklist entries, confirms that the domain is being used for malicious credential‑harvesting activities. No further technical details such as SSL certificate attributes, HTTP response codes, page title, or content analysis are publicly available at this time.

The lack of public page‑level data limits attribution of a specific campaign or victim profile, but the existing indicators are sufficient to warrant immediate defensive action. Organizations should add the domain and its resolving IP address to inbound and outbound deny lists, enforce DNS‑based filtering that incorporates Google Safe Browsing and PhishDestroy feeds, and monitor for any attempted connections from internal hosts. Continuous re‑evaluation is recommended, as additional detections may emerge from future scans.