Phishing sites impersonating Govin

PhishDestroy has recorded 41 phishing domains impersonating Govin since 2026-04-28, 2 of them in the last 30 days. The most used registrars are Dynadot and GNAME.COM; the most common TLDs are .xin and .live. Open Govin only from its official app or a saved bookmark.

41
Domains, all time
2
Last 30 days
6
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 12026-08-01: 02026-08-02: 212026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 12026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 12026-08-18: 02026-08-19: 02026-08-20: 22026-08-21: 22026-08-22: 02026-08-23: 12026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 12026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 12026-10-15: 02026-10-16: 02026-10-17: 12026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Govin phishing domains detected per day: 32 from 2026-07-25 to 2026-10-22; peak 21.

How to tell a fake Govin site

Words most often added to the brand in reported domains: gov, crsorgi, gova, index, crs, laoshunfa, govaco, crcsorgigov, mvd, ssina.

  • Type the address yourself or use a bookmark; phishing links for Govin arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Govin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Govin phishing domains

The 41 most recently detected domains impersonating Govin
DomainFirst detectedStatus at last checkRegistrar
dc.crsorgi.gov.in-crs.site2026-10-17OfflineNAMECHEAP
ckytopind.cfd2026-10-14OfflineDynadot
web-index.info2026-09-13OnlineGoDaddy.com
govtment.sbs2026-08-23OfflineDynadot
undisclosed.sbs2026-08-21OfflineDYNADOT
yearok.sbs2026-08-21OfflineDYNADOT
dccrsorgia.github.io2026-08-20OfflineGitHub
allowed.sbs2026-08-20OfflineDynadot
nexiscore.live2026-08-17OfflineDynadot
saiyxsux.live2026-08-12OfflineGNAME.COM
govj.one2026-08-02OfflineGname.com
zytsyxbwa.live2026-08-02Offline—
zasudtytw.xin2026-08-02OfflineGNAME.COM
zxizusuy.xin2026-08-02OfflineGNAME.COM
zuytyarws.xin2026-08-02OfflineGNAME.COM
zixhasda.xin2026-08-02OfflineGNAME.COM
xcvgyuraw.live2026-08-02OfflineGNAME.COM
tzawccsw.xin2026-08-02OfflineGNAME.COM
sfinmgov.club2026-08-02OfflineDynadot
lzaiwugsa.ink2026-08-02OfflineGname.com
laoshunfa.xyz2026-08-02OfflineDynadot
ingovtop.click2026-08-02Offline—
govtocki.shop2026-08-02OnlineDynadot
gov-xnui.com2026-08-02OnlineRealtime Register
gova.lat2026-08-02OnlineDynadot
gisudyawz.ink2026-08-02OfflineGname.com
fsyahsxd.xin2026-08-02OfflineGNAME.COM
ckoming.study2026-08-02OfflineDynadot
bcgovtop.lol2026-08-02Offline—
22.laoshunfa.xyz2026-08-02OfflineDynadot
indemitie.click2026-08-02OfflineDynadot
qunfamao.cc2026-07-31OfflineHefei Juming Network Technology
xjxfxn.com2026-07-22OnlineGname.com
crsor.ve1.shop2026-07-21OfflineGoDaddy.com
birth.riyanuclfast.de2026-07-21Offline—
dccrsorgi1gov.github.io2026-07-16OfflineGitHub
dc.crsorgi.gov.in.index.crs.certificate4.com2026-07-13OfflineGoDaddy.com
mvd.ssina.cyou2026-07-09OfflineDYNADOT
gova.pics2026-06-30OnlineDYNADOT
crcsorgigov.co.in2026-06-17OfflineHosting Concepts dba Openprovider
dc.crsorgi.gov.in.govaco.shop2026-04-28OfflineGoDaddy.com

All 41 Govin reports

Where they are registered and hosted

Registrars

  1. Dynadot9
  2. GNAME.COM8
  3. DYNADOT4
  4. Gname.com4
  5. GoDaddy.com2
  6. GoDaddy.com2
  7. GitHub2
  8. Hosting Concepts dba Openprovider1

Top-level domains

  1. .xin6
  2. .live4
  3. .sbs4
  4. .shop3
  5. .com3
  6. .io2
  7. .click2
  8. .ink2

Hosting networks

  1. Cloudflare, Inc.9
  2. Beyotta Services LLP5
  3. Hetzner Online GmbH3
  4. CTGSERVERLIMITED-AS-AP - CTG Server Limited, HK3
  5. Fastly, Inc.2
  6. AS13335 Cloudflare, Inc.2
  7. HETZNER-AS Hetzner Online GmbH, DE1
  8. TIER4CLOU-AS - Tier 4 Cloud Services, IN1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Govin; share of all PhishDestroy reports: 0.02%.