1icecoin[.]icu
“1icecoin.icu”
On July 25, 2026, the domain 1icecoin.icu was identified as a potential phishing site targeting users interested in cryptocurrencies. This domain was created on February 21, 2026, and was taken offline as of the report date. Analysis indicates that the domain has been flagged by 2 of 93 security vendors on VirusTotal, suggesting a relatively low level of consensus among security solutions. However, the domain appears on 5 security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, which elevates the risk level to 'elevated'.
The SSL certificate for this domain is rated R10, indicating a moderate level of trust. The domain resolves to the IP address 75.2.18.233, which is located in the United States and is associated with Amazon.com, Inc. (AS16509). The page title found is '1icecoin.icu', but the exact content of the page has not yet been analyzed.
Given the domain's presence on multiple blocklists and its elevated risk level, defenders should consider blocking access to this domain and monitoring for any related activities. The status of the domain as 'offline' does not negate the need for caution, as such domains can be reactivated or repurposed. Defenders are advised to review their network logs for any past or current connections to this IP address and to educate users about the risks of interacting with unknown cryptocurrency-related domains.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
SHORTDOT ZONE · PUBLIC EVIDENCE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive