# Phishing sites impersonating Slack PhishDestroy has recorded 20 phishing domains impersonating Slack since 2025-09-12, 3 of them in the last 30 days. The most used registrars are Cloudflare and NiceNIC; the most common TLDs are .com and .top. Open Slack only from its official app or a saved bookmark. 20Domains, all time 3Last 30 days 13Online at last check 10Confirmed takedowns ## New domains in the last 90 days Slack phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Slack site Words most often added to the brand in reported domains: claim, rpc, drops, portal, spacexneurastocks, cloudinfolibrary, token, updates, update, proc. - Type the address yourself or use a bookmark; phishing links for Slack arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Slack does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Slack phishing domains The 20 most recently detected domains impersonating Slack Domain | First detected | Status at last check | Registrar | [status.com-polybet-q05.com](https://phishdestroy.io/domain/status.com-polybet-q05.com/) | 2026-10-22 | Online | NICENIC | [richaxisholdings.com](https://phishdestroy.io/domain/richaxisholdings.com/) | 2026-10-20 | Unknown | Ultahost | [corvegrepay.com](https://phishdestroy.io/domain/corvegrepay.com/) | 2026-10-19 | Online | NICENIC | [waaako.net](https://phishdestroy.io/domain/waaako.net/) | 2026-02-08 | Taken down | NameCheap | [access-portal.top](https://phishdestroy.io/domain/access-portal.top/) | 2026-02-08 | Unknown | NiceNIC | [dropsteams.top](https://phishdestroy.io/domain/dropsteams.top/) | 2026-01-30 | Unknown | NiceNIC | [redtron.info](https://phishdestroy.io/domain/redtron.info/) | 2026-01-24 | Taken down | Onamae.com | [reworkdapzz.top](https://phishdestroy.io/domain/reworkdapzz.top/) | 2026-01-02 | Taken down | 耐思尼克国际集团有限公司 | [drops-acess.top](https://phishdestroy.io/domain/drops-acess.top/) | 2025-12-23 | Online | 耐思尼克国际集团有限公司 | [yayforms.link](https://phishdestroy.io/domain/yayforms.link/) | 2025-12-23 | Taken down | NameCheap | [elevenslauncher.com](https://phishdestroy.io/domain/elevenslauncher.com/) | 2025-12-21 | Taken down | NameCheap | [drop-portal.top](https://phishdestroy.io/domain/drop-portal.top/) | 2025-12-18 | Online | NiceNIC | [gateway.ipfs.io](https://phishdestroy.io/domain/gateway.ipfs.io/) | 2025-12-14 | Taken down | CSC Corporate Domains | [drops-streams.top](https://phishdestroy.io/domain/drops-streams.top/) | 2025-12-12 | Unknown | NiceNIC | [claim-proc.pages.dev](https://phishdestroy.io/domain/claim-proc.pages.dev/) | 2025-12-01 | Taken down | Cloudflare | [update-rpc.live](https://phishdestroy.io/domain/update-rpc.live/) | 2025-11-29 | Taken down | Cloudflare | [rpc-updates.live](https://phishdestroy.io/domain/rpc-updates.live/) | 2025-11-27 | Taken down | Cloudflare | [claim-token.live](https://phishdestroy.io/domain/claim-token.live/) | 2025-11-26 | Offline | Cloudflare | [cloudinfolibrary.com](https://phishdestroy.io/domain/cloudinfolibrary.com/) | 2025-11-19 | Taken down | GoDaddy.com | [spacexneurastocks.com](https://phishdestroy.io/domain/spacexneurastocks.com/) | 2025-09-12 | Offline | NameSilo | [All 20 Slack reports](https://phishdestroy.io/domain/?brand=Slack) ## Where they are registered and hosted ### Registrars - Cloudflare4 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)3 - 耐思尼克国际集团有限公司2 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)2 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)1 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1 - CSC Corporate Domains1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)6 - [.top](https://phishdestroy.io/tld/top/)6 - [.live](https://phishdestroy.io/tld/live/)3 - [.dev](https://phishdestroy.io/tld/dev/)1 - [.io](https://phishdestroy.io/tld/io/)1 - [.link](https://phishdestroy.io/tld/link/)1 - [.info](https://phishdestroy.io/tld/info/)1 - [.net](https://phishdestroy.io/tld/net/)1 ### Hosting networks - CLOUDFLARENET, US11 - CLOUDFLARENET - Cloudflare, Inc., US4 - HOSTWINDS, US1 - FASTLY, US1 - Cloudflare, Inc.1 - Femo IT Solutions Limited1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Slack; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/slack/