Phishing domains under .ws

.ws accounts for 80 of the 224,866 domains in the PhishDestroy database (0.04%), with 7 new ones in the last 30 days. The most impersonated brand under .ws is Amazon. 52 were online at the last check and 11 have a confirmed takedown.

80
Reported .ws domains
0.04%
Share of PhishDestroy reports
7
Last 30 days
11
Confirmed takedowns

Detections per month

2025-11: 62025-12: 32026-01: 42026-02: 112026-03: 72026-04: 12026-05: 82026-06: 102026-07: 82026-08: 32026-09: 72026-10: 6
.ws phishing domains detected per month: 74 from 2025-11 to 2026-10; peak 11.

Brands and registrars

Impersonated brands

  1. Amazon9
  2. Solana3
  3. Telegram2
  4. Sui2
  5. MetaMask2
  6. OpenSea1
  7. Coingecko1
  8. TikTok1

Registrars

  1. NameCheap9
  2. GoDaddy.com9
  3. NameSilo6
  4. Key-Systems4
  5. DYNADOT4
  6. Dynadot4
  7. NAMECHEAP3
  8. Tilda3

Latest .ws phishing domains

The 30 most recently detected .ws domains
DomainFirst detectedStatus at last checkRegistrar
solewar.ws2026-10-16OfflineNameSilo
catcoin.ws2026-10-13Offline—
f8f8bet.ws2026-10-09Online—
wewin55.ws2026-10-06OnlineDYNADOT
spotifysvotingslink.ct.ws2026-10-06Online—
wellsfargosecurelogin.ct.ws2026-10-02Online—
endpoint.binancepay.dot2.ws2026-09-25OnlineGoDaddy.com
robinhoodilogin.tilda.ws2026-09-11OnlineTilda
bullvers.ws2026-09-06OnlineNameSilo
hsbcbankuk.ws2026-09-05Online—
onlinemobileaccess.ct.ws2026-09-04OnlineNamecheap
bullverse.ws2026-09-01Online—
bullsol.ws2026-09-01Offline—
airdrop.ct.ws2026-08-26OnlineNAMECHEAP
coinbase.ct.ws2026-08-14Online—
bitfinex.ws2026-08-09OfflineJuly Name
2138.ws2026-07-27Online—
fortnite.ws2026-07-22OnlineWeb Commerce Communications
riotgames.ws2026-07-15OnlineGlobal Domain
stirka-premium.tilda.ws2026-07-10OnlineGoDaddy.com
eapp-academy.tilda.ws2026-07-08OnlineGoDaddy.com
fastdomain.ws2026-07-06OfflineGlobal Domain
8g93p.stick.ws2026-07-03OnlineGoDaddy.com
happy2hub.ws2026-07-01OnlineDYNADOT
aml.compliance.ws2026-06-28OfflineNAMECHEAP
wayofsoul.tilda.ws2026-06-24OnlineGoDaddy.com
lgstd.ws2026-06-22OnlineWeb Commerce Communications
melania.ws2026-06-20OnlineDynadot
nexfill.ws2026-06-15OnlineKey-Systems
cointracker.ws2026-06-15Online—

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ws registrations; first .ws report 2025-09-09.