# Phishing domains under .ws

.ws accounts for 80 of the 224,866 domains in the PhishDestroy database (0.04%), with 7 new ones in the last 30 days. The most impersonated brand under .ws is Amazon. 52 were online at the last check and 11 have a confirmed takedown.

80Reported .ws domains

0.04%Share of PhishDestroy reports

7Last 30 days

11Confirmed takedowns

## Detections per month

.ws phishing domains detected per month: 74 from 2025-11 to 2026-10; peak 11.

## Brands and registrars

### Impersonated brands

- [Amazon](https://phishdestroy.io/brand/amazon/)9
- [Solana](https://phishdestroy.io/brand/solana/)3
- [Telegram](https://phishdestroy.io/brand/telegram/)2
- [Sui](https://phishdestroy.io/brand/sui/)2
- [MetaMask](https://phishdestroy.io/brand/metamask/)2
- [OpenSea](https://phishdestroy.io/brand/opensea/)1
- [Coingecko](https://phishdestroy.io/brand/coingecko/)1
- [TikTok](https://phishdestroy.io/brand/tiktok/)1

### Registrars

- [NameCheap](https://phishdestroy.io/registrar/namecheap/)9
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)9
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)6
- [Key-Systems](https://phishdestroy.io/registrar/key-systems/)4
- [DYNADOT](https://phishdestroy.io/registrar/dynadot/)4
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)4
- [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)3
- Tilda3

## Latest .ws phishing domains

The 30 most recently detected .ws domains
Domain | First detected | Status at last check | Registrar | 
[solewar.ws](https://phishdestroy.io/domain/solewar.ws/) | 2026-10-16 | Offline | NameSilo | 
[catcoin.ws](https://phishdestroy.io/domain/catcoin.ws/) | 2026-10-13 | Offline | — | 
[f8f8bet.ws](https://phishdestroy.io/domain/f8f8bet.ws/) | 2026-10-09 | Online | — | 
[wewin55.ws](https://phishdestroy.io/domain/wewin55.ws/) | 2026-10-06 | Online | DYNADOT | 
[spotifysvotingslink.ct.ws](https://phishdestroy.io/domain/spotifysvotingslink.ct.ws/) | 2026-10-06 | Online | — | 
[wellsfargosecurelogin.ct.ws](https://phishdestroy.io/domain/wellsfargosecurelogin.ct.ws/) | 2026-10-02 | Online | — | 
[endpoint.binancepay.dot2.ws](https://phishdestroy.io/domain/endpoint.binancepay.dot2.ws/) | 2026-09-25 | Online | GoDaddy.com | 
[robinhoodilogin.tilda.ws](https://phishdestroy.io/domain/robinhoodilogin.tilda.ws/) | 2026-09-11 | Online | Tilda | 
[bullvers.ws](https://phishdestroy.io/domain/bullvers.ws/) | 2026-09-06 | Online | NameSilo | 
[hsbcbankuk.ws](https://phishdestroy.io/domain/hsbcbankuk.ws/) | 2026-09-05 | Online | — | 
[onlinemobileaccess.ct.ws](https://phishdestroy.io/domain/onlinemobileaccess.ct.ws/) | 2026-09-04 | Online | Namecheap | 
[bullverse.ws](https://phishdestroy.io/domain/bullverse.ws/) | 2026-09-01 | Online | — | 
[bullsol.ws](https://phishdestroy.io/domain/bullsol.ws/) | 2026-09-01 | Offline | — | 
[airdrop.ct.ws](https://phishdestroy.io/domain/airdrop.ct.ws/) | 2026-08-26 | Online | NAMECHEAP | 
[coinbase.ct.ws](https://phishdestroy.io/domain/coinbase.ct.ws/) | 2026-08-14 | Online | — | 
[bitfinex.ws](https://phishdestroy.io/domain/bitfinex.ws/) | 2026-08-09 | Offline | July Name | 
[2138.ws](https://phishdestroy.io/domain/2138.ws/) | 2026-07-27 | Online | — | 
[fortnite.ws](https://phishdestroy.io/domain/fortnite.ws/) | 2026-07-22 | Online | Web Commerce Communications | 
[riotgames.ws](https://phishdestroy.io/domain/riotgames.ws/) | 2026-07-15 | Online | Global Domain | 
[stirka-premium.tilda.ws](https://phishdestroy.io/domain/stirka-premium.tilda.ws/) | 2026-07-10 | Online | GoDaddy.com | 
[eapp-academy.tilda.ws](https://phishdestroy.io/domain/eapp-academy.tilda.ws/) | 2026-07-08 | Online | GoDaddy.com | 
[fastdomain.ws](https://phishdestroy.io/domain/fastdomain.ws/) | 2026-07-06 | Offline | Global Domain | 
[8g93p.stick.ws](https://phishdestroy.io/domain/8g93p.stick.ws/) | 2026-07-03 | Online | GoDaddy.com | 
[happy2hub.ws](https://phishdestroy.io/domain/happy2hub.ws/) | 2026-07-01 | Online | DYNADOT | 
[aml.compliance.ws](https://phishdestroy.io/domain/aml.compliance.ws/) | 2026-06-28 | Offline | NAMECHEAP | 
[wayofsoul.tilda.ws](https://phishdestroy.io/domain/wayofsoul.tilda.ws/) | 2026-06-24 | Online | GoDaddy.com | 
[lgstd.ws](https://phishdestroy.io/domain/lgstd.ws/) | 2026-06-22 | Online | Web Commerce Communications | 
[melania.ws](https://phishdestroy.io/domain/melania.ws/) | 2026-06-20 | Online | Dynadot | 
[nexfill.ws](https://phishdestroy.io/domain/nexfill.ws/) | 2026-06-15 | Online | Key-Systems | 
[cointracker.ws](https://phishdestroy.io/domain/cointracker.ws/) | 2026-06-15 | Online | — | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ws registrations; first .ws report 2025-09-09.

Canonical: https://phishdestroy.io/tld/ws/