gov[.]uk-dwplim[.]icu

This domain, gov.uk-dwplim.icu, is actively flagged as a phishing site targeting UK government credentials. Analysis indicates the domain was registered on June 12, 2026, through Aceville Pte. Ltd., a registrar frequently associated with fraudulent infrastructure. The domain resolves to IP address 43.130.72.207, which has been linked to other malicious activities and is currently blocked by PhishDestroy. It appears on at least one security blocklist, reinforcing its classification as a threat.

VirusTotal reports that 15 out of 91 security vendors have detected this domain as malicious, providing additional confirmation of its phishing intent. Infrastructure analysis reveals the domain is hosted on an IP with no established reputation for legitimate services, and the naming convention (gov.uk-dwplim.icu) suggests an attempt to mimic official UK government domains. While the exact content of the site has not been analysed, the combination of its registration details, hosting infrastructure, and detection by multiple security vendors confirms its role in phishing operations.

Defenders should treat this domain as an active threat and implement blocking measures at the DNS, proxy, and endpoint levels. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats in this campaign. No SSL or HTTP status details are currently available, but the domain's active status and detection history warrant immediate action.