gov-dwpqts[.]top

Analysis indicates that the domain gov-dwpqts.top was registered on June 12, 2026 through Alibaba Cloud (阿里云计算有限公司). Within two weeks of its creation the domain surfaced on a security blocklist and has been listed by PhishDestroy as a malicious resource. VirusTotal reports that 13 out of 91 scanned security vendors classify the domain as malicious, providing a moderate consensus of detection.

The limited number of vendor detections suggests the payload or infrastructure may be in an early deployment stage, but the presence on a dedicated phishing blocklist confirms that the domain is being used for credential‑stealing operations. No public information is available regarding the hosting IP address, autonomous system number, SSL certificate details, or HTTP response codes, and the page title has not been disclosed by the intelligence sources. Consequently, defenders cannot correlate the domain with a specific target brand or phishing kit, and the exact nature of the victim‑facing content remains unknown.

Recommendations for security teams include adding gov-dwpqts.top to outbound and inbound firewall deny lists, configuring DNS filtering to block resolution, updating endpoint detection signatures to include the 13 vendor indicators, and monitoring for any traffic to the domain in network logs. Continuous re‑evaluation is advised, as additional detection data or hosting information may emerge that could refine the risk assessment.