help-crypto[.]icu

The domain help-crypto.icu was registered on June 10, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently active with an elevated risk rating. Threat intelligence classifies it as a generic phishing site. Detection evidence shows that six of ninety‑one security vendors on VirusTotal have flagged the domain, indicating that at least a subset of scanners have identified malicious behavior.

Independent blocklist monitoring confirms that the domain appears on three security blocklists, and it has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services. No additional infrastructure details such as IP address, autonomous system number, hosting provider, SSL certificate information, HTTP response codes, or page title have been disclosed in the available data. Consequently, the full scope of the hosting environment and any associated payloads remain unknown.

Defenders should prioritize immediate inclusion of help-crypto.icu in URL filtering rules across web gateways, email gateways, and endpoint protection solutions, leveraging the existing blocklist entries and the specific block actions taken by PhishDestroy, MetaMask, and SEAL. Continuous monitoring of VirusTotal and other multi‑engine scanners for updated detection counts is recommended, as further analysis may reveal additional malicious indicators. Organizations should also consider reviewing recent user activity for any attempted connections to this domain, especially from accounts that interact with cryptocurrency services, to detect potential compromise attempts.