gov-dwpqts[.]top
Analysis indicates that the domain gov-dwpqts.top was registered on June 12, 2026 through Alibaba Cloud (阿里云计算有限公司). Within two weeks of its creation the domain surfaced on a security blocklist and has been listed by PhishDestroy as a malicious resource. VirusTotal reports that 13 out of 91 scanned security vendors classify the domain as malicious, providing a moderate consensus of detection.
The limited number of vendor detections suggests the payload or infrastructure may be in an early deployment stage, but the presence on a dedicated phishing blocklist confirms that the domain is being used for credential‑stealing operations. No public information is available regarding the hosting IP address, autonomous system number, SSL certificate details, or HTTP response codes, and the page title has not been disclosed by the intelligence sources. Consequently, defenders cannot correlate the domain with a specific target brand or phishing kit, and the exact nature of the victim‑facing content remains unknown.
Recommendations for security teams include adding gov-dwpqts.top to outbound and inbound firewall deny lists, configuring DNS filtering to block resolution, updating endpoint detection signatures to include the 13 vendor indicators, and monitoring for any traffic to the domain in network logs. Continuous re‑evaluation is advised, as additional detection data or hosting information may emerge that could refine the risk assessment.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive