Phishing domains under .work

.work accounts for 96 of the 224,866 domains in the PhishDestroy database (0.04%), with 10 new ones in the last 30 days. The most impersonated brand under .work is Google. 53 were online at the last check and 13 have a confirmed takedown.

96
Reported .work domains
0.04%
Share of PhishDestroy reports
10
Last 30 days
13
Confirmed takedowns

Detections per month

2025-11: 12025-12: 32026-01: 62026-02: 162026-03: 92026-04: 62026-05: 72026-06: 112026-07: 132026-08: 42026-09: 62026-10: 7
.work phishing domains detected per month: 89 from 2025-11 to 2026-10; peak 16.

Brands and registrars

Impersonated brands

  1. Google3
  2. MetaMask3
  3. Solana2
  4. Base2
  5. MetaMask2
  6. Binance2
  7. Raydium2
  8. Telegram2

Registrars

  1. GoDaddy.com24
  2. NameCheap15
  3. Cloudflare11
  4. NAMECHEAP9
  5. PublicDomainRegistry.com8
  6. NameSilo7
  7. Gname.com3
  8. Dynadot2

Latest .work phishing domains

The 30 most recently detected .work domains
DomainFirst detectedStatus at last checkRegistrar
nox.work2026-10-19OnlineNAMECHEAP
russianmarket.work2026-10-16OnlineCloudflare
geraytuinfinity.work2026-10-15OnlineCloudflare
project-members-meeting.work2026-10-11OfflineNameSilo
meet-google.work2026-10-11OnlinePublicDomainRegistry.com
joinremotist.work2026-10-09OnlineNameCheap
adsperialink.work2026-10-06OnlineNAMECHEAP
designspace.work2026-09-23OnlineGoDaddy.com
ruqvexa.work2026-09-22OnlineCloudflare
xorqevin.work2026-09-22OnlineCloudflare
playerok.work2026-09-14OfflinePublicDomainRegistry.com
scalpx.work2026-09-05OnlineTrustname.com
skillnova.work2026-09-04OnlineNameCheap
stresser.work2026-08-10OfflinePublicDomainRegistry.com
sbl.tuto.work2026-08-10OfflineGlobal Domain
crypto.trynet.work2026-08-10OfflineGoDaddy.com
livemain.work2026-08-04OfflineNameCheap
klopick-gay-nenatural.work2026-07-31OnlinePublicDomainRegistry.com
storeoftraffic.work2026-07-28OnlineTrustname.com
gon-demo.pirago.work2026-07-27OnlineOnamae.com
konnex.work2026-07-27OnlineNameSilo
karaoke-odai.oka-ryunoske.work2026-07-27OnlineOnamae.com
reallive.work2026-07-23OfflineNAMECHEAP
prof-sarai-tqwgdso.work2026-07-22OfflineNameSilo
zoomvideomeeting.work2026-07-18OnlineNameSilo
excellent.savescale.work2026-07-08OnlineNameCheap
devries.work2026-07-08OnlineNAMECHEAP
healthyemployee.work2026-07-07OfflineMarkMonitor
ms-live.work2026-07-07OnlineNAMECHEAP
docupdate.work2026-07-01OnlineNAMECHEAP

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .work registrations; first .work report 2025-09-02.