gov-dwpqih[.]top

Analysis of the domain gov-dwpqih.top shows it is actively used for a generic phishing campaign. The domain was registered on June 12, 2026 through Dominet (HK) Limited, a registrar based in Hong Kong. VirusTotal records indicate that 12 of 91 security vendors have flagged the domain as malicious, providing early indication of hostile activity.

The domain currently appears on one public security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one anti‑phishing solution has taken mitigation action. No additional intelligence such as hosting IP, SSL certificate details, HTTP response codes, or page title has been published, leaving the underlying infrastructure largely opaque. Because the domain’s creation date is recent and it is already listed by multiple detection sources, defenders should treat it as high‑confidence phishing infrastructure.

Recommended defensive steps include adding the domain to DNS and proxy blocklists, monitoring network traffic for outbound connections to the domain, and alerting endpoint security solutions to quarantine any related detections. Continuous re‑query of threat‑intel feeds is advised to capture any future enrichments such as hosting details or payload characteristics. The elevated risk rating aligns with the observed vendor detections and blocklist presence, reinforcing the need for proactive mitigation.