State warns of phishing via fake government websites | Honolulu Star

State officials are warning the public of a potential phishing campaign using the domain codify.inc to impersonate official government websites.

Cybercriminals are creating deceptive web addresses to trick users into providing sensitive personal information or login credentials. In particular, they are creating fake web addresses for the Hawaii Department of Taxation and Hawaii Department of Labor and Industrial Relations.

The deceptive web addresses all include codify.inc.

>> dlir.hi.usa.codify.inc/ (Impersonating DLIR)

>> hidot.hi.usa.codify.inc/ (Impersonating the Department of Transportation)

>> hdoa.hi.usa.codify.inc/

>> hidoe.hi.usa.codify.inc/

>> dod.hi.usa.codify.inc/

>> health.hi.usa.codify.inc/

>> dbedt.hi.usa.codify.inc/

>> dcca.hi.usa.codify.inc/

>> tax.hi.usa.codify.inc/

>> dhs.hi.usa.codify.inc/

The state Office of Enterprise Technology Services says these sites may appear legitimate and often use “AI-native services” as a lure to encourage users to enter their data.

To protect yourself from phishing:

>> Check the URL: Official State of Hawaii websites will always end in .gov. If the address ends in .inc, .co, or any other extension, it is not an official government portal.

>> Verify the Source: Do not click on links provided in unsolicited emails or text messages. Type official addresses directly into your browser.

>> Report Suspicious Activity: If you encounter a site you believe is fraudulent, please report it to the soc@hawaii.gov.