# Phishing sites impersonating Thecourierguy

PhishDestroy has recorded 12 phishing domains impersonating Thecourierguy since 2025-12-28, 0 of them in the last 30 days. The most used registrars are Netlify and Atak Domain; the most common TLDs are .app and .live. Open Thecourierguy only from its official app or a saved bookmark.

12Domains, all time

0Last 30 days

1Online at last check

2Confirmed takedowns

## New domains in the last 90 days

Thecourierguy phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Thecourierguy site

Words most often added to the brand in reported domains: pay, thecouriierguy, the, ccguydeliver, order, couriguydeliever, pub, bcb, courierguy, theccguydelivery.
- Type the address yourself or use a bookmark; phishing links for Thecourierguy arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Thecourierguy does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Thecourierguy phishing domains

The 12 most recently detected domains impersonating Thecourierguy
Domain | First detected | Status at last check | Registrar | 
[thecourierg.netlify.app](https://phishdestroy.io/domain/thecourierg.netlify.app/) | 2026-09-01 | Offline | Netlify | 
[theccguy-delivery.netlify.app](https://phishdestroy.io/domain/theccguy-delivery.netlify.app/) | 2026-08-24 | Offline | Netlify | 
[theccguydeliver.netlify.app](https://phishdestroy.io/domain/theccguydeliver.netlify.app/) | 2026-07-29 | Offline | Netlify | 
[d-thecourierguy.netlify.app](https://phishdestroy.io/domain/d-thecourierguy.netlify.app/) | 2026-07-12 | Offline | Netlify | 
[tcg-del-home.netlify.app](https://phishdestroy.io/domain/tcg-del-home.netlify.app/) | 2026-07-10 | Offline | Netlify | 
[theccguydelivery464.netlify.app](https://phishdestroy.io/domain/theccguydelivery464.netlify.app/) | 2026-06-30 | Offline | Netlify | 
[courierguy8374.netlify.app](https://phishdestroy.io/domain/courierguy8374.netlify.app/) | 2026-06-24 | Offline | Netlify | 
[pub-6e2bcb5421744b5d9d3d63e36d24f033.r2.dev](https://phishdestroy.io/domain/pub-6e2bcb5421744b5d9d3d63e36d24f033.r2.dev/) | 2026-05-30 | Online | Cloudflare R2 | 
[couriguydeliever.netlify.app](https://phishdestroy.io/domain/couriguydeliever.netlify.app/) | 2026-03-21 | Offline | Netlify | 
[order-thecourierguy.netlify.app](https://phishdestroy.io/domain/order-thecourierguy.netlify.app/) | 2026-02-27 | Taken down | Netlify | 
[the-ccguydeliver.netlify.app](https://phishdestroy.io/domain/the-ccguydeliver.netlify.app/) | 2026-01-03 | Taken down | Netlify | 
[pay.thecouriierguy.live](https://phishdestroy.io/domain/pay.thecouriierguy.live/) | 2025-12-28 | Offline | Atak Domain | 

[All 12 Thecourierguy reports](https://phishdestroy.io/domain/?brand=Thecourierguy)

## Where they are registered and hosted

### Registrars

- Netlify10
- [Atak Domain](https://phishdestroy.io/registrar/atak-domain/)1
- Cloudflare R21

### Top-level domains

- [.app](https://phishdestroy.io/tld/app/)10
- [.live](https://phishdestroy.io/tld/live/)1
- [.dev](https://phishdestroy.io/tld/dev/)1

### Hosting networks

- Amazon.com, Inc.5
- AMAZON-AES - Amazon.com, Inc., US2
- AMAZON-02 - Amazon.com, Inc., US2
- AS-COLOCROSSING, US1
- AMAZON-AES, US1
- CLOUDFLARENET - Cloudflare, Inc., US1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Thecourierguy; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/thecourierguy/