# Phishing sites impersonating Ups

PhishDestroy has recorded 78 phishing domains impersonating Ups since 2025-08-10, 15 of them in the last 30 days. The most used registrars are Cloudflare and GoDaddy.com; the most common TLDs are .com and .shop. Open Ups only from its official app or a saved bookmark.

78Domains, all time

15Last 30 days

51Online at last check

10Confirmed takedowns

## New domains in the last 90 days

Ups phishing domains detected per day: 23 from 2026-07-25 to 2026-10-22; peak 4.

## How to tell a fake Ups site

Words most often added to the brand in reported domains: jups, services, geno, pets, silverbullsfx, steeriteautotech, crackstreams, ardentsaving, icttradeupmarket, subwaysurfmod.
- Type the address yourself or use a bookmark; phishing links for Ups arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Ups does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Ups phishing domains

The 50 most recently detected domains impersonating Ups
Domain | First detected | Status at last check | Registrar | 
[avenorcroatia.digital](https://phishdestroy.io/domain/avenorcroatia.digital/) | 2026-10-22 | Online | NETIM | 
[aurixiontrust.pro](https://phishdestroy.io/domain/aurixiontrust.pro/) | 2026-10-22 | Online | Dynadot | 
[auraxai-app.pro](https://phishdestroy.io/domain/auraxai-app.pro/) | 2026-10-22 | Online | Spaceship | 
[albionai.click](https://phishdestroy.io/domain/albionai.click/) | 2026-10-20 | Online | NETIM | 
[boiilifestyle.shop](https://phishdestroy.io/domain/boiilifestyle.shop/) | 2026-10-20 | Offline | Spaceship | 
[boatza.com](https://phishdestroy.io/domain/boatza.com/) | 2026-10-20 | Unknown | Cosmotown | 
[aipro-sys.shop](https://phishdestroy.io/domain/aipro-sys.shop/) | 2026-10-20 | Online | Spaceship | 
[energy-dasstudio.at](https://phishdestroy.io/domain/energy-dasstudio.at/) | 2026-10-19 | Online | easyname ( https://nic.at/registrar/414 | 
[blendsusworks.shop](https://phishdestroy.io/domain/blendsusworks.shop/) | 2026-10-17 | Online | Dynadot | 
[bldstudio.shop](https://phishdestroy.io/domain/bldstudio.shop/) | 2026-10-17 | Online | Dynadot | 
[hubbycarts.com](https://phishdestroy.io/domain/hubbycarts.com/) | 2026-10-17 | Online | Spaceship | 
[bigballerbrandshop.shop](https://phishdestroy.io/domain/bigballerbrandshop.shop/) | 2026-10-16 | Online | Dynadot | 
[perktide.com](https://phishdestroy.io/domain/perktide.com/) | 2026-10-15 | Online | GoDaddy.com | 
[badderform.shop](https://phishdestroy.io/domain/badderform.shop/) | 2026-10-10 | Online | Dynadot | 
[asherahswimwearclub.shop](https://phishdestroy.io/domain/asherahswimwearclub.shop/) | 2026-10-04 | Online | Dynadot | 
[plexportlexsystems.org](https://phishdestroy.io/domain/plexportlexsystems.org/) | 2026-09-19 | Online | Dynadot | 
[simplicatecreations.com](https://phishdestroy.io/domain/simplicatecreations.com/) | 2026-09-19 | Online | Network Solutions | 
[zonixtrust.com](https://phishdestroy.io/domain/zonixtrust.com/) | 2026-09-09 | Online | Cosmotown | 
[advicecentral.shop](https://phishdestroy.io/domain/advicecentral.shop/) | 2026-09-09 | Offline | Dynadot | 
[referralwallet.com](https://phishdestroy.io/domain/referralwallet.com/) | 2026-09-05 | Online | GoDaddy.com | 
[logistics-ups.online](https://phishdestroy.io/domain/logistics-ups.online/) | 2026-09-02 | Offline | DYNADOT | 
[vertiv-jishu.com](https://phishdestroy.io/domain/vertiv-jishu.com/) | 2026-08-09 | Offline | Cloud Yuqu | 
[nexusfluxhubs.com](https://phishdestroy.io/domain/nexusfluxhubs.com/) | 2026-07-27 | Online | Cloudflare | 
[changelly-swap.xyz](https://phishdestroy.io/domain/changelly-swap.xyz/) | 2026-07-06 | Online | Spaceship | 
[ups-douane-post.com](https://phishdestroy.io/domain/ups-douane-post.com/) | 2026-06-15 | Online | Registrar.eu | 
[cricfys.org](https://phishdestroy.io/domain/cricfys.org/) | 2026-06-09 | Online | Spaceship | 
[crickfy.com.co](https://phishdestroy.io/domain/crickfy.com.co/) | 2026-06-08 | Online | Dynadot | 
[upshub.app](https://phishdestroy.io/domain/upshub.app/) | 2026-05-30 | Online | Name.com | 
[e-worldreship.com](https://phishdestroy.io/domain/e-worldreship.com/) | 2026-05-14 | Offline | OwnRegistrar | 
[complete-tune-ups-services-lewisville-tx-9wx.pages.dev](https://phishdestroy.io/domain/complete-tune-ups-services-lewisville-tx-9wx.pages.dev/) | 2026-04-30 | Online | Cloudflare | 
[streamwatch.pages.dev](https://phishdestroy.io/domain/streamwatch.pages.dev/) | 2026-04-25 | Online | Cloudflare | 
[resonance-updates.pages.dev](https://phishdestroy.io/domain/resonance-updates.pages.dev/) | 2026-04-24 | Online | Cloudflare | 
[alf.com.ua](https://phishdestroy.io/domain/alf.com.ua/) | 2026-04-09 | Online | Hosting Ukraine | 
[858bet08.com](https://phishdestroy.io/domain/858bet08.com/) | 2026-04-08 | Online | Cosmotown | 
[bigfishcasinoau.com](https://phishdestroy.io/domain/bigfishcasinoau.com/) | 2026-03-29 | Online | Spaceship | 
[meetbrief.top](https://phishdestroy.io/domain/meetbrief.top/) | 2026-03-20 | Online | Dominet (HK) | 
[captcha.usmql.net](https://phishdestroy.io/domain/captcha.usmql.net/) | 2026-03-17 | Online | Cloudflare | 
[astrgoal.app](https://phishdestroy.io/domain/astrgoal.app/) | 2026-03-13 | Unknown | NiceNIC | 
[my-ups.live](https://phishdestroy.io/domain/my-ups.live/) | 2026-02-28 | Taken down | NiceNIC | 
[cuevana3-fv8i.pages.dev](https://phishdestroy.io/domain/cuevana3-fv8i.pages.dev/) | 2026-02-26 | Offline | Cloudflare | 
[navigating-health-services.pages.dev](https://phishdestroy.io/domain/navigating-health-services.pages.dev/) | 2026-02-26 | Offline | Cloudflare | 
[sub.abokidevelopers.com](https://phishdestroy.io/domain/sub.abokidevelopers.com/) | 2026-02-26 | Offline | NameCheap | 
[apex-toolhub.com](https://phishdestroy.io/domain/apex-toolhub.com/) | 2026-02-26 | Offline | — | 
[tustbackups-web3.com](https://phishdestroy.io/domain/tustbackups-web3.com/) | 2026-02-26 | Offline | Global Domain | 
[baseaml.live](https://phishdestroy.io/domain/baseaml.live/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[ups-ebc-764603794666.us-central1.run.app](https://phishdestroy.io/domain/ups-ebc-764603794666.us-central1.run.app/) | 2026-02-26 | Online | MarkMonitor | 
[pinups-br.com](https://phishdestroy.io/domain/pinups-br.com/) | 2026-02-22 | Unknown | NiceNIC | 
[cboewhlle.com](https://phishdestroy.io/domain/cboewhlle.com/) | 2026-02-11 | Offline | Gname.com | 
[cboeevcs.com](https://phishdestroy.io/domain/cboeevcs.com/) | 2026-02-10 | Offline | Gname.com | 
[cboefewq.com](https://phishdestroy.io/domain/cboefewq.com/) | 2026-02-10 | Offline | Gname.com | 

[All 78 Ups reports](https://phishdestroy.io/domain/?brand=Ups)

## Where they are registered and hosted

### Registrars

- Cloudflare10
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)8
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)7
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)6
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)5
- [Gname.com](https://phishdestroy.io/registrar/name-com/)4
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)3

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)32
- [.shop](https://phishdestroy.io/tld/shop/)8
- [.app](https://phishdestroy.io/tld/app/)5
- [.dev](https://phishdestroy.io/tld/dev/)5
- [.net](https://phishdestroy.io/tld/net/)3
- [.org](https://phishdestroy.io/tld/org/)3
- [.online](https://phishdestroy.io/tld/online/)2
- [.live](https://phishdestroy.io/tld/live/)2

### Hosting networks

- CLOUDFLARENET, US19
- Cloudflare, Inc.12
- malakmadze Malakmadze Web LLC, GE7
- CLOUDFLARENET - Cloudflare, Inc., US6
- AS-COLOCROSSING, US4
- Snel.com B.V.4
- AS-HOSTINGER Hostinger International Limited, CY2
- GOOGLE-CLOUD-PLATFORM, US2

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Ups; share of all PhishDestroy reports: 0.03%.

Canonical: https://phishdestroy.io/brand/ups/