gov-dwpqti[.]top

The domain gov-dwpqti.top was registered on 12 June 2026 through the Alibaba Cloud service provider (阿里云计算有限公司). Within two weeks of its creation, the domain appeared on a security blocklist and was subsequently added to the PhishDestroy blocklist, indicating that defensive feeds have identified it as a malicious resource. VirusTotal analysis shows that 14 out of 91 scanning engines returned a positive detection, confirming that a subset of security products consider the domain to be associated with generic phishing. The limited detection count suggests that the payload or landing page may be newly deployed or that many scanners have not yet classified the content.

Publicly available intelligence does not provide the hosting IP address, ASN, country of operation, SSL certificate details, HTTP response codes, or page title. Consequently, the full infrastructure profile remains incomplete. No additional blocklists beyond the single entry have reported the domain, and there is no evidence of safe browsing list exclusion. The lack of broader coverage may reflect the recent creation date or limited propagation of the phishing campaign.

Given the current evidence, defensive operators should prioritize immediate blocking of gov-dwpqti.top at network perimeter and endpoint filters. Monitoring of DNS queries for this FQDN is recommended to detect any residual or future resolution attempts. Organizations should also consider adding the domain to internal threat intelligence feeds and updating URL filtering rules to include it. Continuous re‑evaluation is advised, as additional indicators such as hosting details, page content, or new vendor detections may emerge.