Phishing sites impersonating Ups

PhishDestroy has recorded 78 phishing domains impersonating Ups since 2025-08-10, 15 of them in the last 30 days. The most used registrars are Cloudflare and GoDaddy.com; the most common TLDs are .com and .shop. Open Ups only from its official app or a saved bookmark.

78
Domains, all time
15
Last 30 days
51
Online at last check
10
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 12026-09-03: 02026-09-04: 02026-09-05: 12026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 22026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 22026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 12026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 12026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 12026-10-16: 12026-10-17: 32026-10-18: 02026-10-19: 12026-10-20: 42026-10-21: 02026-10-22: 3
Ups phishing domains detected per day: 23 from 2026-07-25 to 2026-10-22; peak 4.

How to tell a fake Ups site

Words most often added to the brand in reported domains: jups, services, geno, pets, silverbullsfx, steeriteautotech, crackstreams, ardentsaving, icttradeupmarket, subwaysurfmod.

  • Type the address yourself or use a bookmark; phishing links for Ups arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Ups does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Ups phishing domains

The 50 most recently detected domains impersonating Ups
DomainFirst detectedStatus at last checkRegistrar
avenorcroatia.digital2026-10-22OnlineNETIM
aurixiontrust.pro2026-10-22OnlineDynadot
auraxai-app.pro2026-10-22OnlineSpaceship
albionai.click2026-10-20OnlineNETIM
boiilifestyle.shop2026-10-20OfflineSpaceship
boatza.com2026-10-20UnknownCosmotown
aipro-sys.shop2026-10-20OnlineSpaceship
energy-dasstudio.at2026-10-19Onlineeasyname ( https://nic.at/registrar/414
blendsusworks.shop2026-10-17OnlineDynadot
bldstudio.shop2026-10-17OnlineDynadot
hubbycarts.com2026-10-17OnlineSpaceship
bigballerbrandshop.shop2026-10-16OnlineDynadot
perktide.com2026-10-15OnlineGoDaddy.com
badderform.shop2026-10-10OnlineDynadot
asherahswimwearclub.shop2026-10-04OnlineDynadot
plexportlexsystems.org2026-09-19OnlineDynadot
simplicatecreations.com2026-09-19OnlineNetwork Solutions
zonixtrust.com2026-09-09OnlineCosmotown
advicecentral.shop2026-09-09OfflineDynadot
referralwallet.com2026-09-05OnlineGoDaddy.com
logistics-ups.online2026-09-02OfflineDYNADOT
vertiv-jishu.com2026-08-09OfflineCloud Yuqu
nexusfluxhubs.com2026-07-27OnlineCloudflare
changelly-swap.xyz2026-07-06OnlineSpaceship
ups-douane-post.com2026-06-15OnlineRegistrar.eu
cricfys.org2026-06-09OnlineSpaceship
crickfy.com.co2026-06-08OnlineDynadot
upshub.app2026-05-30OnlineName.com
e-worldreship.com2026-05-14OfflineOwnRegistrar
complete-tune-ups-services-lewisville-tx-9wx.pages.dev2026-04-30OnlineCloudflare
streamwatch.pages.dev2026-04-25OnlineCloudflare
resonance-updates.pages.dev2026-04-24OnlineCloudflare
alf.com.ua2026-04-09OnlineHosting Ukraine
858bet08.com2026-04-08OnlineCosmotown
bigfishcasinoau.com2026-03-29OnlineSpaceship
meetbrief.top2026-03-20OnlineDominet (HK)
captcha.usmql.net2026-03-17OnlineCloudflare
astrgoal.app2026-03-13UnknownNiceNIC
my-ups.live2026-02-28Taken downNiceNIC
cuevana3-fv8i.pages.dev2026-02-26OfflineCloudflare
navigating-health-services.pages.dev2026-02-26OfflineCloudflare
sub.abokidevelopers.com2026-02-26OfflineNameCheap
apex-toolhub.com2026-02-26Offline—
tustbackups-web3.com2026-02-26OfflineGlobal Domain
baseaml.live2026-02-26OfflinePublicDomainRegistry.com
ups-ebc-764603794666.us-central1.run.app2026-02-26OnlineMarkMonitor
pinups-br.com2026-02-22UnknownNiceNIC
cboewhlle.com2026-02-11OfflineGname.com
cboeevcs.com2026-02-10OfflineGname.com
cboefewq.com2026-02-10OfflineGname.com

All 78 Ups reports

Where they are registered and hosted

Registrars

  1. Cloudflare10
  2. GoDaddy.com8
  3. Spaceship7
  4. Dynadot6
  5. NameCheap5
  6. Gname.com4
  7. NiceNIC4
  8. PublicDomainRegistry.com3

Top-level domains

  1. .com32
  2. .shop8
  3. .app5
  4. .dev5
  5. .net3
  6. .org3
  7. .online2
  8. .live2

Hosting networks

  1. CLOUDFLARENET, US19
  2. Cloudflare, Inc.12
  3. malakmadze Malakmadze Web LLC, GE7
  4. CLOUDFLARENET - Cloudflare, Inc., US6
  5. AS-COLOCROSSING, US4
  6. Snel.com B.V.4
  7. AS-HOSTINGER Hostinger International Limited, CY2
  8. GOOGLE-CLOUD-PLATFORM, US2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Ups; share of all PhishDestroy reports: 0.03%.