# Phishing sites impersonating Govus

PhishDestroy has recorded 12 phishing domains impersonating Govus since 2025-10-11, 0 of them in the last 30 days. The most used registrars are Cosmotown and INWX; the most common TLDs are .top and .com. Open Govus only from its official app or a saved bookmark.

12Domains, all time

0Last 30 days

1Online at last check

0Confirmed takedowns

## New domains in the last 90 days

Govus phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 2.

## How to tell a fake Govus site

Words most often added to the brand in reported domains: kinhelp, design, dimfig, javipell, inipin, mail, pickpdf, relaxfig, subclick, yyyyyyykjghfghjkjlhjnkjhgfhfjgkhghfg.
- Type the address yourself or use a bookmark; phishing links for Govus arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Govus does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Govus phishing domains

The 12 most recently detected domains impersonating Govus
Domain | First detected | Status at last check | Registrar | 
[revelmora.com](https://phishdestroy.io/domain/revelmora.com/) | 2026-09-01 | Offline | Squarespace Domains II | 
[1qr.no](https://phishdestroy.io/domain/1qr.no/) | 2026-09-01 | Online | Domeneshop | 
[yyyyyyykjghfghjkjlhjnkjhgfhfjgkhghfg.com](https://phishdestroy.io/domain/yyyyyyykjghfghjkjlhjnkjhgfhfjgkhghfg.com/) | 2026-03-11 | Offline | Cosmotown | 
[subclick.top](https://phishdestroy.io/domain/subclick.top/) | 2026-03-11 | Offline | Cosmotown | 
[relaxfig.top](https://phishdestroy.io/domain/relaxfig.top/) | 2026-03-11 | Offline | Cosmotown | 
[pickpdf.top](https://phishdestroy.io/domain/pickpdf.top/) | 2026-03-11 | Offline | Cosmotown | 
[mail.kinhelp.top](https://phishdestroy.io/domain/mail.kinhelp.top/) | 2026-03-11 | Offline | Cosmotown | 
[kinhelp.top](https://phishdestroy.io/domain/kinhelp.top/) | 2026-03-11 | Offline | Cosmotown | 
[javipell.top](https://phishdestroy.io/domain/javipell.top/) | 2026-03-11 | Offline | Cosmotown | 
[inipin.top](https://phishdestroy.io/domain/inipin.top/) | 2026-03-11 | Offline | Cosmotown | 
[dimfig.top](https://phishdestroy.io/domain/dimfig.top/) | 2026-03-11 | Offline | Cosmotown | 
[bx-design.com](https://phishdestroy.io/domain/bx-design.com/) | 2025-10-11 | Offline | INWX | 

[All 12 Govus reports](https://phishdestroy.io/domain/?brand=Govus)

## Where they are registered and hosted

### Registrars

- [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)8
- [INWX](https://phishdestroy.io/registrar/inwx-gmbh/)1
- [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)1
- Domeneshop1
- [Squarespace Domains II](https://phishdestroy.io/registrar/squarespace/)1

### Top-level domains

- [.top](https://phishdestroy.io/tld/top/)8
- [.com](https://phishdestroy.io/tld/com/)3
- .no1

### Hosting networks

- Ultahost, Inc.9
- ROUTERHOSTING, US1
- ServeTheWorld AS1
- Cloudflare, Inc.1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Govus; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/govus/