# Phishing domains under .work

.work accounts for 96 of the 224,866 domains in the PhishDestroy database (0.04%), with 10 new ones in the last 30 days. The most impersonated brand under .work is Google. 53 were online at the last check and 13 have a confirmed takedown.

96Reported .work domains

0.04%Share of PhishDestroy reports

10Last 30 days

13Confirmed takedowns

## Detections per month

.work phishing domains detected per month: 89 from 2025-11 to 2026-10; peak 16.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)3
- [MetaMask](https://phishdestroy.io/brand/metamask/)3
- [Solana](https://phishdestroy.io/brand/solana/)2
- [Base](https://phishdestroy.io/brand/base/)2
- [MetaMask](https://phishdestroy.io/brand/metamask/)2
- [Binance](https://phishdestroy.io/brand/binance/)2
- [Raydium](https://phishdestroy.io/brand/raydium/)2
- [Telegram](https://phishdestroy.io/brand/telegram/)2

### Registrars

- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)24
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)15
- Cloudflare11
- [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)9
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)8
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)7
- [Gname.com](https://phishdestroy.io/registrar/name-com/)3
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)2

## Latest .work phishing domains

The 30 most recently detected .work domains
Domain | First detected | Status at last check | Registrar | 
[nox.work](https://phishdestroy.io/domain/nox.work/) | 2026-10-19 | Online | NAMECHEAP | 
[russianmarket.work](https://phishdestroy.io/domain/russianmarket.work/) | 2026-10-16 | Online | Cloudflare | 
[geraytuinfinity.work](https://phishdestroy.io/domain/geraytuinfinity.work/) | 2026-10-15 | Online | Cloudflare | 
[project-members-meeting.work](https://phishdestroy.io/domain/project-members-meeting.work/) | 2026-10-11 | Offline | NameSilo | 
[meet-google.work](https://phishdestroy.io/domain/meet-google.work/) | 2026-10-11 | Online | PublicDomainRegistry.com | 
[joinremotist.work](https://phishdestroy.io/domain/joinremotist.work/) | 2026-10-09 | Online | NameCheap | 
[adsperialink.work](https://phishdestroy.io/domain/adsperialink.work/) | 2026-10-06 | Online | NAMECHEAP | 
[designspace.work](https://phishdestroy.io/domain/designspace.work/) | 2026-09-23 | Online | GoDaddy.com | 
[ruqvexa.work](https://phishdestroy.io/domain/ruqvexa.work/) | 2026-09-22 | Online | Cloudflare | 
[xorqevin.work](https://phishdestroy.io/domain/xorqevin.work/) | 2026-09-22 | Online | Cloudflare | 
[playerok.work](https://phishdestroy.io/domain/playerok.work/) | 2026-09-14 | Offline | PublicDomainRegistry.com | 
[scalpx.work](https://phishdestroy.io/domain/scalpx.work/) | 2026-09-05 | Online | Trustname.com | 
[skillnova.work](https://phishdestroy.io/domain/skillnova.work/) | 2026-09-04 | Online | NameCheap | 
[stresser.work](https://phishdestroy.io/domain/stresser.work/) | 2026-08-10 | Offline | PublicDomainRegistry.com | 
[sbl.tuto.work](https://phishdestroy.io/domain/sbl.tuto.work/) | 2026-08-10 | Offline | Global Domain | 
[crypto.trynet.work](https://phishdestroy.io/domain/crypto.trynet.work/) | 2026-08-10 | Offline | GoDaddy.com | 
[livemain.work](https://phishdestroy.io/domain/livemain.work/) | 2026-08-04 | Offline | NameCheap | 
[klopick-gay-nenatural.work](https://phishdestroy.io/domain/klopick-gay-nenatural.work/) | 2026-07-31 | Online | PublicDomainRegistry.com | 
[storeoftraffic.work](https://phishdestroy.io/domain/storeoftraffic.work/) | 2026-07-28 | Online | Trustname.com | 
[gon-demo.pirago.work](https://phishdestroy.io/domain/gon-demo.pirago.work/) | 2026-07-27 | Online | Onamae.com | 
[konnex.work](https://phishdestroy.io/domain/konnex.work/) | 2026-07-27 | Online | NameSilo | 
[karaoke-odai.oka-ryunoske.work](https://phishdestroy.io/domain/karaoke-odai.oka-ryunoske.work/) | 2026-07-27 | Online | Onamae.com | 
[reallive.work](https://phishdestroy.io/domain/reallive.work/) | 2026-07-23 | Offline | NAMECHEAP | 
[prof-sarai-tqwgdso.work](https://phishdestroy.io/domain/prof-sarai-tqwgdso.work/) | 2026-07-22 | Offline | NameSilo | 
[zoomvideomeeting.work](https://phishdestroy.io/domain/zoomvideomeeting.work/) | 2026-07-18 | Online | NameSilo | 
[excellent.savescale.work](https://phishdestroy.io/domain/excellent.savescale.work/) | 2026-07-08 | Online | NameCheap | 
[devries.work](https://phishdestroy.io/domain/devries.work/) | 2026-07-08 | Online | NAMECHEAP | 
[healthyemployee.work](https://phishdestroy.io/domain/healthyemployee.work/) | 2026-07-07 | Offline | MarkMonitor | 
[ms-live.work](https://phishdestroy.io/domain/ms-live.work/) | 2026-07-07 | Online | NAMECHEAP | 
[docupdate.work](https://phishdestroy.io/domain/docupdate.work/) | 2026-07-01 | Online | NAMECHEAP | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .work registrations; first .work report 2025-09-02.

Canonical: https://phishdestroy.io/tld/work/