# Phishing domains under .courses

.courses accounts for 28 of the 224,866 domains in the PhishDestroy database (0.01%), with 2 new ones in the last 30 days. The most impersonated brand under .courses is Google. 27 were online at the last check and 1 have a confirmed takedown.

28Reported .courses domains

0.01%Share of PhishDestroy reports

2Last 30 days

1Confirmed takedowns

## Detections per month

.courses phishing domains detected per month: 28 from 2025-11 to 2026-10; peak 22.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)6

### Registrars

- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)21
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)4
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)1
- [Sav.com](https://phishdestroy.io/registrar/sav-com/)1
- [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)1

## Latest .courses phishing domains

The 28 most recently detected .courses domains
Domain | First detected | Status at last check | Registrar | 
[superbuyde.courses](https://phishdestroy.io/domain/superbuyde.courses/) | 2026-10-19 | Online | Spaceship | 
[superbuyfr.courses](https://phishdestroy.io/domain/superbuyfr.courses/) | 2026-10-19 | Online | Spaceship | 
[guides-onfixedfloat.courses](https://phishdestroy.io/domain/guides-onfixedfloat.courses/) | 2026-09-13 | Offline | Registrar.eu | 
[vote-id-yrw4f0et8m.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-yrw4f0et8m.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-u86utnxyzw.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-u86utnxyzw.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-jx5mbppy.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-jx5mbppy.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-fpz8hy.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-fpz8hy.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-ay1ghexnn.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-ay1ghexnn.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-xsuzh8lald.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-xsuzh8lald.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-tqbt1miqw5.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-tqbt1miqw5.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-p7mc4eg.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-p7mc4eg.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-p6arqz.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-p6arqz.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-ofguahw6.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-ofguahw6.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-mu8lvg.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-mu8lvg.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-mb3jmxt.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-mb3jmxt.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-m5xsudsg.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-m5xsudsg.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-fsntlaqvqt.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-fsntlaqvqt.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-fcszmee.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-fcszmee.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-ewiqoqaj.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-ewiqoqaj.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-digfpd.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-digfpd.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-c39z3sknk7.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-c39z3sknk7.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-6wia08tt.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-6wia08tt.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-4rpfbytiif.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-4rpfbytiif.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[vote-id-2xeysgob.portallogonapp.courses](https://phishdestroy.io/domain/vote-id-2xeysgob.portallogonapp.courses/) | 2026-09-08 | Online | Global Domain | 
[qevvax.courses](https://phishdestroy.io/domain/qevvax.courses/) | 2026-06-10 | Online | Sav.com | 
[sanguen.courses](https://phishdestroy.io/domain/sanguen.courses/) | 2026-05-05 | Online | Dynadot | 
[predict.courses](https://phishdestroy.io/domain/predict.courses/) | 2026-02-22 | Online | Spaceship | 
[zpunpuk.courses](https://phishdestroy.io/domain/zpunpuk.courses/) | 2025-11-23 | Taken down | Spaceship | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .courses registrations; first .courses report 2025-11-23.

Canonical: https://phishdestroy.io/tld/courses/