bochk-gov[.]com

The domain bochk-gov.com was registered on 21 February 2026 through GoDaddy.com, LLC and uses the default GoDaddy nameservers ns35.domaincontrol.com and ns36.domaincontrol.com. DNS resolution points to the IPv4 address 15.197.225.128, which is the only host observed for this indicator. The domain is currently listed as active in internal telemetry and has been flagged by the PhishDestroy blocklist. It also appears on one additional security blocklist, confirming that external mitigation services have identified it as malicious. VirusTotal analysis shows that the domain was submitted to 91 scanning engines; none of the engines report a detection at the time of this assessment.

The absence of a detection does not constitute evidence of safety, and the lack of a detection may reflect limited visibility of the underlying payload or a short‑lived campaign. No SSL certificate details, HTTP response codes, or page‑title information are available from the current intelligence set, and no Safe Browsing, Open Threat Exchange, or reputation scores have been published for this host. Consequently, the precise content and the targeted brand, if any, remain unknown. The infrastructure footprint is minimal, consisting of a single A record and a standard registrar configuration, which is typical of fast‑flux or throwaway phishing operations that rely on low‑cost hosting.

Defenders should treat bochk-gov.com as a high‑confidence phishing indicator despite the zero‑detection count. Immediate actions include adding the domain and its resolved IP address to network‑level blocklists, updating email security gateways to deny messages containing the domain, and monitoring DNS queries for related look‑alike domains created after the February 2026 registration date. Continuous re‑scanning on VirusTotal and other sandbox services is recommended to capture any future payloads that may be associated with the domain.