gov-dwpqid[.]top

gov-dwpqid.top was registered through Dominet (HK) Limited on June 12, 2026. The domain appears on a single security blocklist and is listed by PhishDestroy as an active malicious endpoint. VirusTotal analysis shows that 14 out of 91 security vendors have flagged the domain, indicating a consensus of malicious intent. The elevated risk rating aligns with the observed detection rate and the presence on a blocklist.

No additional infrastructure details such as hosting IPs, ASN, or SSL certificate information have been published in the current intelligence set. Consequently, the precise hosting location and any underlying command‑and‑control infrastructure remain unknown. The domain’s activity status is marked as active as of the report date, July 29, 2026, and the threat type is classified as generic phishing. Defenders should add gov-dwpqid.top to local deny lists, ensure that network perimeter solutions reference the blocklist that includes the domain, and monitor outbound traffic for connections to the domain’s resolved IPs once they become available.

Given the modest blocklist presence, it is advisable to corroborate the threat with additional telemetry such as DNS request logs and endpoint detections. Organizations employing web filtering should enforce a block on the domain and consider leveraging threat‑intelligence feeds that incorporate the 14 vendor detections. Continuous re‑evaluation is recommended, as further analysis may reveal hosting details or additional malicious payloads associated with the domain.