gov-dwpqoi[.]top

Analysis as of July 29 2026 indicates that the domain gov-dwpqoi.top was registered on June 12 2026 through the Alibaba Cloud Computing Ltd. registrar (阿里云计算有限公司). Within two months of its creation the domain has been flagged by multiple security services: VirusTotal reports 15 of 91 scanned vendors marking the site as malicious, and it appears on a single external blocklist that is actively enforced by PhishDestroy. The threat classification in the intelligence feed is generic phishing, and the risk rating is elevated with the operational status listed as active.

The available data does not include any observed hosting IP address, SSL certificate details, HTTP response codes, page title, or content analysis, so the precise tactics employed by the site remain unknown. Because the page content has not been publicly disclosed, analysts cannot confirm which credential fields are presented or whether any redirection mechanisms are used. Nonetheless, the convergence of vendor detections and blocklist inclusion provides sufficient confidence to treat the domain as a confirmed phishing infrastructure.

Defensive measures should include adding gov-dwpqoi.top to network and endpoint URL filtering rules, ensuring that DNS resolvers block queries to the domain, and updating internal threat feeds with the current detection count. Continuous monitoring of VirusTotal and other reputation services is advised to capture any changes in detection coverage. Organizations should also consider sharing any future observations with industry sharing platforms to enrich collective intelligence on this short‑lived actor.