dailytravels247[.]com

dailytravels247.com was registered on February 19 2026 through Ultahost, Inc. and is hosted on the IP address 192.142.10.5. The domain resolves to four authoritative name servers – ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com and ns4.ultahost.com – all operated by the same registrar. VirusTotal scans show that four out of ninety‑one security vendors have flagged the domain as malicious, indicating a low‑to‑moderate detection rate across the scanning ecosystem. The domain is listed on three external blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services, reinforcing its classification as a phishing‑related resource.

The current operational status remains “active” as of the report date, meaning the site continues to resolve and respond to queries. Analysis of the available telemetry confirms that the primary threat vector is generic phishing, though the specific payload or impersonated brand has not been disclosed in the collected evidence. The limited detection breadth (four vendor flags) suggests that some scanners have not yet incorporated the indicator, which may allow the domain to bypass less‑aggressive defenses. Defenders should therefore add the domain and its associated IP address to deny‑list rules in firewalls, DNS resolvers, and proxy filters.

In addition, security teams should monitor the four Ultahost name servers for any newly observed subdomains that resolve to the same IP, as adversaries often reuse the same hosting infrastructure for parallel campaigns. Continuous re‑scanning on multi‑engine platforms such as VirusTotal is recommended to capture any future changes in vendor verdicts. Until a more detailed payload analysis is released, the precautionary stance should be to treat any traffic to dailytravels247.com as hostile and to block it at the network perimeter.