gov-dwpqit[.]top

Analysis date July 29 2026. The domain gov-dwpqit.top was registered on June 12 2026 via Dominet (HK) Limited. The registration entity is a known registrar often used for malicious infrastructure. Threat intelligence flags the domain as a generic phishing site. It appears on the PhishDestroy blocklist, confirming active mitigation by that service.

VirusTotal scans show that 12 of 91 security vendors have flagged the domain, indicating a moderate level of detection consensus. Additionally, the domain is listed on one external blocklist, further corroborating its malicious reputation. No public information is currently available regarding the hosting IP address, ASN, or geographic location, nor are SSL certificate details or HTTP response codes disclosed. Safe Browsing status has not been published, and there is no observable page title or brand targeting information. Consequently, the precise content of the landing page remains unknown.

The combination of recent creation, registrar choice, blocklist inclusion, and multi‑vendor detections suggests an active phishing campaign aimed at harvesting credentials or personal data. Defenders should block outbound connections to gov-dwpqit.top at the network perimeter, add the domain to local DNS blacklists, and ensure that endpoint protection solutions incorporate the latest threat feeds that include this indicator. Continuous monitoring for any new associated IPs or SSL certificates is recommended, as the infrastructure may evolve. Organizations should also educate users about unsolicited messages that could direct them to this domain, emphasizing verification of URLs before entering sensitive information. The threat remains elevated until further takedown or expiration actions are observed.