# Phishing domains under .icu

.icu accounts for 2,472 of the 224,866 domains in the PhishDestroy database (1.10%), with 119 new ones in the last 30 days. The most impersonated brand under .icu is Google. 677 were online at the last check and 128 have a confirmed takedown.

2,472Reported .icu domains

1.10%Share of PhishDestroy reports

119Last 30 days

128Confirmed takedowns

## Detections per month

.icu phishing domains detected per month: 2,271 from 2025-11 to 2026-10; peak 515.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)179
- [X.com](https://phishdestroy.io/brand/x-com/)154
- [MetaMask](https://phishdestroy.io/brand/metamask/)73
- [Binance](https://phishdestroy.io/brand/binance/)39
- [Cloudflare](https://phishdestroy.io/brand/cloudflare/)27
- [Solana](https://phishdestroy.io/brand/solana/)22
- [Ethereum](https://phishdestroy.io/brand/ethereum/)21
- [Apple](https://phishdestroy.io/brand/apple/)19

### Registrars

- [NICENIC](https://phishdestroy.io/registrar/nicenic/)773
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)260
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)249
- [Gname.com](https://phishdestroy.io/registrar/name-com/)233
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)130
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)115
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)91
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)75

## Latest .icu phishing domains

The 30 most recently detected .icu domains
Domain | First detected | Status at last check | Registrar | 
[secure-gateway324.icu](https://phishdestroy.io/domain/secure-gateway324.icu/) | 2026-10-22 | Online | Eranet | 
[auth-autoscout24.identifier.icu](https://phishdestroy.io/domain/auth-autoscout24.identifier.icu/) | 2026-10-22 | Online | PublicDomainRegistry.com | 
[auth-autoscout24.identifier-ch.icu](https://phishdestroy.io/domain/auth-autoscout24.identifier-ch.icu/) | 2026-10-22 | Online | PublicDomainRegistry.com | 
[findfundes.icu](https://phishdestroy.io/domain/findfundes.icu/) | 2026-10-21 | Online | Eranet | 
[auth-autoscout24.ch-77c435fn7d.icu](https://phishdestroy.io/domain/auth-autoscout24.ch-77c435fn7d.icu/) | 2026-10-21 | Online | PublicDomainRegistry.com | 
[changelly-v2.icu](https://phishdestroy.io/domain/changelly-v2.icu/) | 2026-10-21 | Online | PublicDomainRegistry.com | 
[pusula-amp-56gir.icu](https://phishdestroy.io/domain/pusula-amp-56gir.icu/) | 2026-10-20 | Online | NICENIC | 
[solnet.icu](https://phishdestroy.io/domain/solnet.icu/) | 2026-10-19 | Offline | Registrar.eu | 
[arcportal.icu](https://phishdestroy.io/domain/arcportal.icu/) | 2026-10-16 | Offline | PublicDomainRegistry.com | 
[hoodpad.icu](https://phishdestroy.io/domain/hoodpad.icu/) | 2026-10-15 | Online | NameSilo | 
[whatdom.icu](https://phishdestroy.io/domain/whatdom.icu/) | 2026-10-15 | Offline | GoDaddy.com | 
[pepepad.icu](https://phishdestroy.io/domain/pepepad.icu/) | 2026-10-13 | Online | NameSilo | 
[opentrustcardwallet.icu](https://phishdestroy.io/domain/opentrustcardwallet.icu/) | 2026-10-13 | Online | NICENIC | 
[cardstrustwalletvcc.icu](https://phishdestroy.io/domain/cardstrustwalletvcc.icu/) | 2026-10-13 | Offline | NICENIC | 
[neyinegiris.icu](https://phishdestroy.io/domain/neyinegiris.icu/) | 2026-10-13 | Unknown | NICENIC | 
[vegaswow.icu](https://phishdestroy.io/domain/vegaswow.icu/) | 2026-10-13 | Online | NICENIC | 
[distributions-aave.icu](https://phishdestroy.io/domain/distributions-aave.icu/) | 2026-10-11 | Online | Eranet | 
[rewards-aave.icu](https://phishdestroy.io/domain/rewards-aave.icu/) | 2026-10-11 | Online | Eranet | 
[allocation-netnet.icu](https://phishdestroy.io/domain/allocation-netnet.icu/) | 2026-10-11 | Online | Eranet | 
[orbio-so.icu](https://phishdestroy.io/domain/orbio-so.icu/) | 2026-10-11 | Online | NICENIC | 
[gate-phantom.icu](https://phishdestroy.io/domain/gate-phantom.icu/) | 2026-10-10 | Offline | NICENIC | 
[allegrolokalnie.pl-09622206.icu](https://phishdestroy.io/domain/allegrolokalnie.pl-09622206.icu/) | 2026-10-10 | Online | Registrar.eu | 
[apetube.icu](https://phishdestroy.io/domain/apetube.icu/) | 2026-10-09 | Online | Dynadot | 
[dezentracore.icu](https://phishdestroy.io/domain/dezentracore.icu/) | 2026-10-09 | Online | GLOBAL ASSET DOMAINS | 
[arcuis.icu](https://phishdestroy.io/domain/arcuis.icu/) | 2026-10-09 | Unknown | NICENIC | 
[wsd-rneritkingerisimi.icu](https://phishdestroy.io/domain/wsd-rneritkingerisimi.icu/) | 2026-10-07 | Online | NICENIC | 
[trip80-co.icu](https://phishdestroy.io/domain/trip80-co.icu/) | 2026-10-07 | Online | NICENIC | 
[saivom.icu](https://phishdestroy.io/domain/saivom.icu/) | 2026-10-07 | Online | NICENIC | 
[allocations-papertrade.icu](https://phishdestroy.io/domain/allocations-papertrade.icu/) | 2026-10-07 | Unknown | NICENIC | 
[pulibetyenigiris.icu](https://phishdestroy.io/domain/pulibetyenigiris.icu/) | 2026-10-07 | Offline | NICENIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .icu registrations; first .icu report 2025-07-12.

Canonical: https://phishdestroy.io/tld/icu/