# Phishing sites impersonating Wordpress PhishDestroy has recorded 455 phishing domains impersonating Wordpress since 2024-03-25, 24 of them in the last 30 days. The most used registrars are HOSTINGER operations and NICENIC; the most common TLDs are .com and .ru. Open Wordpress only from its official app or a saved bookmark. 455Domains, all time 24Last 30 days 215Online at last check 60Confirmed takedowns ## New domains in the last 90 days Wordpress phishing domains detected per day: 70 from 2026-07-25 to 2026-10-22; peak 12. ## How to tell a fake Wordpress site Words most often added to the brand in reported domains: wpenginepowered, wpdevcloud, kulnde, dkev, cloudaccess, jdevcloud, myftpupload, zoom, mybluehost, wallet. - Type the address yourself or use a bookmark; phishing links for Wordpress arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Wordpress does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Wordpress phishing domains The 50 most recently detected domains impersonating Wordpress Domain | First detected | Status at last check | Registrar | [apuestasconlicencia.net](https://phishdestroy.io/domain/apuestasconlicencia.net/) | 2026-10-22 | Online | NICENIC | [aynenoyle.com](https://phishdestroy.io/domain/aynenoyle.com/) | 2026-10-22 | Online | Spaceship | [africantraditionalhealing.co.za](https://phishdestroy.io/domain/africantraditionalhealing.co.za/) | 2026-10-20 | Online | 1-Grid | [stawki-bet-ua.cz](https://phishdestroy.io/domain/stawki-bet-ua.cz/) | 2026-10-20 | Online | REG-ASCIO | [adatuna.com.tr](https://phishdestroy.io/domain/adatuna.com.tr/) | 2026-10-20 | Online | Çizgi Telekomünikasyon A.Ş | [88vvcom.club](https://phishdestroy.io/domain/88vvcom.club/) | 2026-10-20 | Online | NAMECHEAP | [nl-trueluck.net](https://phishdestroy.io/domain/nl-trueluck.net/) | 2026-10-19 | Online | NICENIC | [alturalgo.ai](https://phishdestroy.io/domain/alturalgo.ai/) | 2026-10-12 | Online | NameCheap | [bursaguzelevdeneve.com](https://phishdestroy.io/domain/bursaguzelevdeneve.com/) | 2026-10-11 | Online | Atak Domain | [cdm.life](https://phishdestroy.io/domain/cdm.life/) | 2026-10-11 | Online | GoDaddy.com | [casadealdeaaraceli.com](https://phishdestroy.io/domain/casadealdeaaraceli.com/) | 2026-10-11 | Online | 10DENCEHISPAHARD, S.L | [chenrenxu.com](https://phishdestroy.io/domain/chenrenxu.com/) | 2026-10-11 | Online | DNSPod | [dicaconsultores.com](https://phishdestroy.io/domain/dicaconsultores.com/) | 2026-10-11 | Offline | Arsys Internet, S.L. dba NICLINE.COM | [dato.co.at](https://phishdestroy.io/domain/dato.co.at/) | 2026-10-11 | Online | RegistryGate ( https://nic.at/registrar/ | [lonner.name](https://phishdestroy.io/domain/lonner.name/) | 2026-10-11 | Online | Key-Systems | [getsoft.site](https://phishdestroy.io/domain/getsoft.site/) | 2026-10-10 | Online | PublicDomainRegistry.com | [cysyonetim.com](https://phishdestroy.io/domain/cysyonetim.com/) | 2026-10-10 | Online | Nics Telekomunikasyon A.S | [driventodaypodcast.com](https://phishdestroy.io/domain/driventodaypodcast.com/) | 2026-10-10 | Online | Dynadot | [242annonces.com](https://phishdestroy.io/domain/242annonces.com/) | 2026-10-10 | Online | HOSTINGER operations | [walletupdate.us](https://phishdestroy.io/domain/walletupdate.us/) | 2026-10-09 | Offline | DYNADOT | [shiny-wilds-online.net](https://phishdestroy.io/domain/shiny-wilds-online.net/) | 2026-10-07 | Online | NICENIC | [ally-spin.club](https://phishdestroy.io/domain/ally-spin.club/) | 2026-10-07 | Online | NICENIC | [salomas.cv](https://phishdestroy.io/domain/salomas.cv/) | 2026-09-23 | Online | ola.cv | [wemajai.pro](https://phishdestroy.io/domain/wemajai.pro/) | 2026-09-23 | Online | NameCheap | [brand-x.co.jp](https://phishdestroy.io/domain/brand-x.co.jp/) | 2026-09-22 | Online | — | [xopytya.pro](https://phishdestroy.io/domain/xopytya.pro/) | 2026-09-21 | Online | NameCheap | [alisfortes.com](https://phishdestroy.io/domain/alisfortes.com/) | 2026-09-20 | Online | NameSilo | [wuzyree.com](https://phishdestroy.io/domain/wuzyree.com/) | 2026-09-19 | Offline | NAMECHEAP | [podlahyruzicka.live](https://phishdestroy.io/domain/podlahyruzicka.live/) | 2026-09-18 | Online | Dynadot | [tokyosanno.com](https://phishdestroy.io/domain/tokyosanno.com/) | 2026-09-18 | Online | Japan Registry Services | [dikojoi.pro](https://phishdestroy.io/domain/dikojoi.pro/) | 2026-09-10 | Online | NameCheap | [ayaztiryaki.com](https://phishdestroy.io/domain/ayaztiryaki.com/) | 2026-09-09 | Online | ODTU Gelistirme Vakfi Bilgi Teknolojiler | [callmechat-live.com](https://phishdestroy.io/domain/callmechat-live.com/) | 2026-09-08 | Online | Register SPA | [courier4sameday.com](https://phishdestroy.io/domain/courier4sameday.com/) | 2026-09-08 | Online | NameCheap | [faxuzeu.com](https://phishdestroy.io/domain/faxuzeu.com/) | 2026-09-07 | Online | NAMECHEAP | [easycactus.co.uk](https://phishdestroy.io/domain/easycactus.co.uk/) | 2026-09-07 | Offline | Namecheap, t/a Spaceship | [onlinepharmaustralia.com](https://phishdestroy.io/domain/onlinepharmaustralia.com/) | 2026-09-06 | Online | GoDaddy.com | [communitydesign.co.jp](https://phishdestroy.io/domain/communitydesign.co.jp/) | 2026-09-05 | Online | — | [get-refunds.top](https://phishdestroy.io/domain/get-refunds.top/) | 2026-09-05 | Offline | Spaceship | [timbrasil5g.com.br](https://phishdestroy.io/domain/timbrasil5g.com.br/) | 2026-09-05 | Offline | — | [chekbot.online](https://phishdestroy.io/domain/chekbot.online/) | 2026-09-04 | Offline | Ligne Web Services dba LWS | [bluegrassmarketinggroup.com](https://phishdestroy.io/domain/bluegrassmarketinggroup.com/) | 2026-09-03 | Online | Key-Systems | [berocae.com](https://phishdestroy.io/domain/berocae.com/) | 2026-09-03 | Online | NameCheap | [jokabet-es.website](https://phishdestroy.io/domain/jokabet-es.website/) | 2026-08-31 | Online | NICENIC | [nexusdarkweburl.com](https://phishdestroy.io/domain/nexusdarkweburl.com/) | 2026-08-31 | Online | Dynadot | [atacadaorubao.com.br](https://phishdestroy.io/domain/atacadaorubao.com.br/) | 2026-08-31 | Online | HSTDOMAINS | [superdigitalheroes.net](https://phishdestroy.io/domain/superdigitalheroes.net/) | 2026-08-24 | Online | LWS dba Ligne Web Services | [davincisgold-casino.online](https://phishdestroy.io/domain/davincisgold-casino.online/) | 2026-08-24 | Online | NICENIC | [ninecasino-italia.site](https://phishdestroy.io/domain/ninecasino-italia.site/) | 2026-08-24 | Online | NICENIC | [woospin.website](https://phishdestroy.io/domain/woospin.website/) | 2026-08-24 | Online | NICENIC | [All 455 Wordpress reports](https://phishdestroy.io/domain/?brand=Wordpress) ## Where they are registered and hosted ### Registrars - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)129 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)23 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)19 - TW-Cloud (ASN: 9123)17 - TIMEWEB-RU14 - [Name SRS](https://phishdestroy.io/registrar/name-srs/)14 - [Spaceship](https://phishdestroy.io/registrar/spaceship/)12 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)11 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)229 - [.ru](https://phishdestroy.io/tld/ru/)31 - [.net](https://phishdestroy.io/tld/net/)18 - [.online](https://phishdestroy.io/tld/online/)12 - [.host](https://phishdestroy.io/tld/host/)11 - [.site](https://phishdestroy.io/tld/site/)10 - [.website](https://phishdestroy.io/tld/website/)9 - [.pro](https://phishdestroy.io/tld/pro/)7 ### Hosting networks - Hostinger International Limited96 - AS-HOSTINGER Hostinger International Limited, CY62 - Cloudflare, Inc.34 - TimeWeb-AS JSC "TIMEWEB", RU31 - CLOUDFLARENET, US14 - BALLOU-AS Hostek AB, SE14 - CLOUDFLARESPECTRUM Cloudflare London, LLC, US13 - CLOUDACCESS-NETWORK, US12 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Wordpress; share of all PhishDestroy reports: 0.20%. Canonical: https://phishdestroy.io/brand/wordpress/