# Phishing sites impersonating Govin PhishDestroy has recorded 41 phishing domains impersonating Govin since 2026-04-28, 2 of them in the last 30 days. The most used registrars are Dynadot and GNAME.COM; the most common TLDs are .xin and .live. Open Govin only from its official app or a saved bookmark. 41Domains, all time 2Last 30 days 6Online at last check 0Confirmed takedowns ## New domains in the last 90 days Govin phishing domains detected per day: 32 from 2026-07-25 to 2026-10-22; peak 21. ## How to tell a fake Govin site Words most often added to the brand in reported domains: gov, crsorgi, gova, index, crs, laoshunfa, govaco, crcsorgigov, mvd, ssina. - Type the address yourself or use a bookmark; phishing links for Govin arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Govin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Govin phishing domains The 41 most recently detected domains impersonating Govin Domain | First detected | Status at last check | Registrar | [dc.crsorgi.gov.in-crs.site](https://phishdestroy.io/domain/dc.crsorgi.gov.in-crs.site/) | 2026-10-17 | Offline | NAMECHEAP | [ckytopind.cfd](https://phishdestroy.io/domain/ckytopind.cfd/) | 2026-10-14 | Offline | Dynadot | [web-index.info](https://phishdestroy.io/domain/web-index.info/) | 2026-09-13 | Online | GoDaddy.com | [govtment.sbs](https://phishdestroy.io/domain/govtment.sbs/) | 2026-08-23 | Offline | Dynadot | [undisclosed.sbs](https://phishdestroy.io/domain/undisclosed.sbs/) | 2026-08-21 | Offline | DYNADOT | [yearok.sbs](https://phishdestroy.io/domain/yearok.sbs/) | 2026-08-21 | Offline | DYNADOT | [dccrsorgia.github.io](https://phishdestroy.io/domain/dccrsorgia.github.io/) | 2026-08-20 | Offline | GitHub | [allowed.sbs](https://phishdestroy.io/domain/allowed.sbs/) | 2026-08-20 | Offline | Dynadot | [nexiscore.live](https://phishdestroy.io/domain/nexiscore.live/) | 2026-08-17 | Offline | Dynadot | [saiyxsux.live](https://phishdestroy.io/domain/saiyxsux.live/) | 2026-08-12 | Offline | GNAME.COM | [govj.one](https://phishdestroy.io/domain/govj.one/) | 2026-08-02 | Offline | Gname.com | [zytsyxbwa.live](https://phishdestroy.io/domain/zytsyxbwa.live/) | 2026-08-02 | Offline | — | [zasudtytw.xin](https://phishdestroy.io/domain/zasudtytw.xin/) | 2026-08-02 | Offline | GNAME.COM | [zxizusuy.xin](https://phishdestroy.io/domain/zxizusuy.xin/) | 2026-08-02 | Offline | GNAME.COM | [zuytyarws.xin](https://phishdestroy.io/domain/zuytyarws.xin/) | 2026-08-02 | Offline | GNAME.COM | [zixhasda.xin](https://phishdestroy.io/domain/zixhasda.xin/) | 2026-08-02 | Offline | GNAME.COM | [xcvgyuraw.live](https://phishdestroy.io/domain/xcvgyuraw.live/) | 2026-08-02 | Offline | GNAME.COM | [tzawccsw.xin](https://phishdestroy.io/domain/tzawccsw.xin/) | 2026-08-02 | Offline | GNAME.COM | [sfinmgov.club](https://phishdestroy.io/domain/sfinmgov.club/) | 2026-08-02 | Offline | Dynadot | [lzaiwugsa.ink](https://phishdestroy.io/domain/lzaiwugsa.ink/) | 2026-08-02 | Offline | Gname.com | [laoshunfa.xyz](https://phishdestroy.io/domain/laoshunfa.xyz/) | 2026-08-02 | Offline | Dynadot | [ingovtop.click](https://phishdestroy.io/domain/ingovtop.click/) | 2026-08-02 | Offline | — | [govtocki.shop](https://phishdestroy.io/domain/govtocki.shop/) | 2026-08-02 | Online | Dynadot | [gov-xnui.com](https://phishdestroy.io/domain/gov-xnui.com/) | 2026-08-02 | Online | Realtime Register | [gova.lat](https://phishdestroy.io/domain/gova.lat/) | 2026-08-02 | Online | Dynadot | [gisudyawz.ink](https://phishdestroy.io/domain/gisudyawz.ink/) | 2026-08-02 | Offline | Gname.com | [fsyahsxd.xin](https://phishdestroy.io/domain/fsyahsxd.xin/) | 2026-08-02 | Offline | GNAME.COM | [ckoming.study](https://phishdestroy.io/domain/ckoming.study/) | 2026-08-02 | Offline | Dynadot | [bcgovtop.lol](https://phishdestroy.io/domain/bcgovtop.lol/) | 2026-08-02 | Offline | — | [22.laoshunfa.xyz](https://phishdestroy.io/domain/22.laoshunfa.xyz/) | 2026-08-02 | Offline | Dynadot | [indemitie.click](https://phishdestroy.io/domain/indemitie.click/) | 2026-08-02 | Offline | Dynadot | [qunfamao.cc](https://phishdestroy.io/domain/qunfamao.cc/) | 2026-07-31 | Offline | Hefei Juming Network Technology | [xjxfxn.com](https://phishdestroy.io/domain/xjxfxn.com/) | 2026-07-22 | Online | Gname.com | [crsor.ve1.shop](https://phishdestroy.io/domain/crsor.ve1.shop/) | 2026-07-21 | Offline | GoDaddy.com | [birth.riyanuclfast.de](https://phishdestroy.io/domain/birth.riyanuclfast.de/) | 2026-07-21 | Offline | — | [dccrsorgi1gov.github.io](https://phishdestroy.io/domain/dccrsorgi1gov.github.io/) | 2026-07-16 | Offline | GitHub | [dc.crsorgi.gov.in.index.crs.certificate4.com](https://phishdestroy.io/domain/dc.crsorgi.gov.in.index.crs.certificate4.com/) | 2026-07-13 | Offline | GoDaddy.com | [mvd.ssina.cyou](https://phishdestroy.io/domain/mvd.ssina.cyou/) | 2026-07-09 | Offline | DYNADOT | [gova.pics](https://phishdestroy.io/domain/gova.pics/) | 2026-06-30 | Online | DYNADOT | [crcsorgigov.co.in](https://phishdestroy.io/domain/crcsorgigov.co.in/) | 2026-06-17 | Offline | Hosting Concepts dba Openprovider | [dc.crsorgi.gov.in.govaco.shop](https://phishdestroy.io/domain/dc.crsorgi.gov.in.govaco.shop/) | 2026-04-28 | Offline | GoDaddy.com | [All 41 Govin reports](https://phishdestroy.io/domain/?brand=Govin) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)9 - [GNAME.COM](https://phishdestroy.io/registrar/name-com/)8 - [DYNADOT](https://phishdestroy.io/registrar/dynadot/)4 - [Gname.com](https://phishdestroy.io/registrar/name-com/)4 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - GitHub2 - Hosting Concepts dba Openprovider1 ### Top-level domains - [.xin](https://phishdestroy.io/tld/xin/)6 - [.live](https://phishdestroy.io/tld/live/)4 - [.sbs](https://phishdestroy.io/tld/sbs/)4 - [.shop](https://phishdestroy.io/tld/shop/)3 - [.com](https://phishdestroy.io/tld/com/)3 - [.io](https://phishdestroy.io/tld/io/)2 - [.click](https://phishdestroy.io/tld/click/)2 - [.ink](https://phishdestroy.io/tld/ink/)2 ### Hosting networks - Cloudflare, Inc.9 - Beyotta Services LLP5 - Hetzner Online GmbH3 - CTGSERVERLIMITED-AS-AP - CTG Server Limited, HK3 - Fastly, Inc.2 - AS13335 Cloudflare, Inc.2 - HETZNER-AS Hetzner Online GmbH, DE1 - TIER4CLOU-AS - Tier 4 Cloud Services, IN1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Govin; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/govin/