gov-dwpqiy[.]top

This assessment concerns gov-dwpqiy.top, an active domain flagged for phishing-related threats. The domain is currently listed on at least one security blocklist, specifically PhishDestroy, indicating that it has been identified by the security community as associated with malicious activities. VirusTotal intelligence further corroborates this, with 13 out of 91 security vendors marking the domain as malicious. The domain was registered relatively recently, on June 12, 2026, through Dominet (HK) Limited, a registrar sometimes associated with high-risk registrations due to its popularity among threat actors for quick setup and potential anonymity.

At this time, there is no evidence in the provided intelligence regarding the specific content or targeted brand on the website. No information on the page title, HTTP status, SSL certificate, or hosting infrastructure is available, limiting a more granular analysis of attack methods or the nature of the phishing attempt. The current blocklist and detection data, however, provide strong indicators that the domain is being used for phishing, though the exact campaign details remain unverified. Defenders are advised to treat gov-dwpqiy.top as a confirmed phishing infrastructure risk.

Blocking access at the network perimeter, updating threat intelligence feeds, and monitoring for any related indicators of compromise are prudent steps. As the domain is still active and flagged by multiple reputable sources, ongoing vigilance is warranted. Further technical investigation, such as capturing live evidence or correlating with user reports, may help clarify the specific threat vector and potential impact.