# workamply.com — SUSPICIOUS

> PhishDestroy flags workamply.com as a crypto drainer domain resolving to 188.114.96.3 with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies workamply.com as a suspected cryptocurrency drainer domain currently under active investigation for potential credential harvesting and asset theft.  Workamply.com exhibits multiple red flags consistent with malicious infrastructure. This domain resolves to IP address 188.114.96.3 and utilizes a Google Trust Services SSL certificate for added legitimacy. Registered through Porkbun LLC on June 17, 2024, the domain remains unflagged by VirusTotal with a perfect 0/95 detection score despite its recent creation. The lack of blocklist entries and clean technical indicators suggests this may represent a newly deployed threat.  While currently categorized as 'under_investigation' with an active status, the domain's technical profile presents significant security concerns. The combination of recent domain age, clean VT analysis, and cryptocurrency-related functionality warrants immediate caution. Users should verify any interaction with workamply.com through PhishDestroy's threat intelligence platform before proceeding. The remaining risk is classified as elevated due to the domain's potential to facilitate unauthorized cryptocurrency transactions. PhishDestroy continues monitoring this domain for updates to its threat classification.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-06-17 18:19:04
- Registrar: Porkbun LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d9b18f0a-b06e-495d-aacd-fb6f80fa65f3
- PhishDestroy: https://phishdestroy.io/domain/workamply.com/
- LLM endpoint: https://phishdestroy.io/domain/workamply.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/workamply.com/
Last updated: 2026-03-29