gov-dwpqod[.]top

The domain gov-dwpqod.top was registered on June 12, 2026 through the Alibaba Cloud Computing Ltd. registrar (阿里云计算有限公司). Within two weeks of its creation it appeared on a security blocklist and was subsequently added to the PhishDestroy blocklist, indicating rapid detection by anti‑phishing services. VirusTotal analysis shows that 17 out of 91 scanning engines have flagged the domain as malicious, providing a modest but notable consensus among security vendors.

The presence of multiple detections, combined with blocklist listings, confirms that the domain is being used for malicious activity consistent with generic phishing campaigns. No public data is currently available regarding the hosting IP address, autonomous system number, geographic location, SSL certificate details, or the exact page title presented to visitors, limiting deeper infrastructure profiling at this stage. Defenders should update perimeter defenses to block the domain at DNS and proxy layers, incorporate the indicator into web‑filtering rules, and monitor outbound traffic for any connections to the domain.

Incident response teams encountering email or messenger artifacts that reference gov-dwpqod.top should treat them as high‑confidence phishing attempts and quarantine related messages. Continuous re‑evaluation is advised, as additional intelligence—such as hosting provider information, observed payloads, or victim reports—may emerge and alter the threat posture.