# www.icann.org — SUSPICIOUS > icann.org is under investigation for generic phishing with 0 of 95 VirusTotal flags. It mimics ICANN's official site to steal credentials. ## Summary PhishDestroy identifies www.icann.org as a domain currently under investigation for generic phishing targeting credential theft. The site is not confirmed malicious but remains active with threat status pending further analysis. This domain was flagged as a generic phishing page by internal systems, currently unconfirmed by VirusTotal vendors (0 detections out of 95). Registered through CSC Corporate Domains, Inc. on September 14, 1998, it resolves to IP 104.18.2.93 and uses a Let's Encrypt SSL certificate. No blocklist entries or trust score data are available at this stage. Users should avoid submitting sensitive information to www.icann.org until the investigation concludes. Verify the site’s URL directly with ICANN’s official communications. Enable browser warnings and use security tools to monitor for suspicious activity. Report any unexpected credential prompts immediately. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 1998-09-14 04:00:00 - Registrar: CSC Corporate Domains, Inc. - IP: 104.18.2.93 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/56f841a1-5057-46e7-ac53-36bbf64779ad - PhishDestroy: https://phishdestroy.io/domain/www.icann.org/ - LLM endpoint: https://phishdestroy.io/domain/www.icann.org/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/www.icann.org/ Last updated: 2026-03-29