gov-dwpop[.]top

Analysis of the domain gov-dwpop.top indicates elevated risk due to confirmed phishing activity targeting government-related services. The domain was registered on June 12, 2026, through Dominet (HK) Limited, a registrar frequently associated with abusive registrations. As of July 29, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing service.

VirusTotal detection data reveals that 10 of 91 security vendors flag this domain as malicious, though the specific nature of the threat—such as the exact brand or service being impersonated—remains unconfirmed due to limited page content analysis. Infrastructure review shows no additional hosting or IP details at this time, and the domain’s SSL certificate status is not publicly documented. The combination of a recent registration date, use of a high-risk registrar, and multiple vendor detections suggests this is not a benign or misconfigured site.

Defenders should treat gov-dwpop.top as an active phishing threat, particularly for users accessing government or public-sector portals. Organizations are advised to block the domain at the network level and monitor for related indicators of compromise. Further investigation into the site’s content and hosting infrastructure is recommended to determine the full scope of the campaign.