gov-dwpqof[.]top

The domain gov-dwpqof.top was registered through 阿里云计算有限公司 on June 12, 2026. VirusTotal records show that 16 of 91 security vendors have flagged the domain, indicating a non‑trivial detection rate across multiple scanning engines. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed considers it malicious.

No additional infrastructure details such as hosting IP address, autonomous system number, geographic location, SSL certificate information, or HTTP response codes have been published in the current intelligence set, so the underlying hosting environment cannot be profiled at this time. Similarly, page‑title metadata, Safe Browsing status, or Open Threat Exchange (OTX) references are absent, leaving the content and exact phishing campaign vector unverified. Defenders should treat the domain as high‑confidence malicious given the multi‑vendor flag count and blocklist presence.

Recommended actions include adding the domain to outbound web filters, ensuring DNS sinkholing for any queries to gov-dwpqof.top, and monitoring for any related C2 or credential‑harvesting activity in network logs. Continuous re‑evaluation is advised as further evidence, such as host details or payload samples, may emerge.