guve[.]bj

The domain guve.bj has been identified as a high-risk phishing threat as of July 12, 2026. Evidence indicates that the domain was created on October 17, 2025, and currently resolves to the IP address 159.198.74.107. The domain is actively serving content titled 'Benin Maritime Administration', which raises concerns about its legitimacy given the context of phishing campaigns impersonating governmental entities. The SSL certificate being utilized is issued by Let's Encrypt, which is commonly used in both legitimate and malicious domains.

Analysis reveals a low trust score of 0 out of 100 on the Gridinsoft platform, indicating a high level of suspicion regarding the domain's integrity. Furthermore, it has been flagged by two security blocklists, and detection data from VirusTotal indicates that 7 out of 95 security vendors have flagged this domain, further corroborating its malicious nature. The domain has also been documented in 18 threat intelligence pulses on AlienVault OTX, highlighting its prominence in ongoing security investigations.

The registrar for guve.bj is NETIM, which could pose a vector for further investigation by security teams. Given the current status of the domain as active and the associated high-risk score, defenders are advised to block access to this domain in their cybersecurity frameworks. Continuous monitoring of this domain and associated IP addresses should be undertaken to mitigate any potential security breaches or phishing attempts targeting individuals or organizations related to maritime operations in Benin. Overall, the evidence strongly suggests that guve.bj is engaged in phishing activity targeting users through malicious impersonation.