Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

0
Total Tracked
0
VT Detected
0
Last Seen Active
0
Unavailable at Last Check
0
VT Pending
Ultahost, Inc

Ultahost, Inc

36
Phishing Domains
26
Still Alive
8
Taken Down
94.4%
Detection Rate
7.1
Avg VT Score
72.2%
Alive Rate
2 Abuse Reports Sent to Ultahost, Inc
PhishDestroy has filed 2 abuse reports covering 2 phishing domains registered through Ultahost, Inc. Reports sent since May 1, 2026. 1300% of reported domains remain active, suggesting inadequate enforcement of abuse policies.
94.4% of domains flagged by VirusTotal 19 domains with VT ≥ 5
Tracking since Aug 2025 — latest: Jul 30, 2026

clean Drainer High Threat

166,757 domains tracked
166,757
Total Domains
75,562
Still Alive
88,984
Taken Down
88.4%
Detection Rate
8.5
Avg VT Score
45.3%
Alive Rate
45.3% of domains still active 96,524 domains with VT ≥ 5
Tracking since Oct 2023 — latest: Jul 31, 2026
Ultahost, Inc 36 domains
Screenshot of piauthenticationsonline.life
piauthenticationsonline.life
20 VTUnknownfacebook
Screenshot of piauthenticationsonline.life
piauthenticationsonline.life
Screenshot of crestmonddig.live
crestmonddig.live
16 VTLive
Screenshot of crestmonddig.live
crestmonddig.live
apivault.info
14 VTLive
Screenshot of farossonglobaltrade.ltd
farossonglobaltrade.ltd
14 VTLiveBinance
Screenshot of farossonglobaltrade.ltd
farossonglobaltrade.ltd
Screenshot of nerd-minepro.ltd
nerd-minepro.ltd
14 VTLive
Screenshot of nerd-minepro.ltd
nerd-minepro.ltd
Screenshot of ciphertrace.report
ciphertrace.report
13 VTLive
Screenshot of ciphertrace.report
ciphertrace.report
Screenshot of mql5.software
mql5.software
13 VTLive
Screenshot of mql5.software
mql5.software
Screenshot of app.meteora.trading
app.meteora.trading
12 VTUnknown
Screenshot of app.meteora.trading
app.meteora.trading
Screenshot of meteora.trading
meteora.trading
12 VTUnknownacross
Screenshot of meteora.trading
meteora.trading
Screenshot of trustwallet.com.mu
trustwallet.com.mu
11 VTUnknownTrust Wallet
Screenshot of trustwallet.com.mu
trustwallet.com.mu
cpanel.mjunioevaluate.mobi
9 VTLive
cpcalendars.mjunioevaluate.mobi
9 VTLive
cpcontacts.mjunioevaluate.mobi
9 VTLive
webmail.mjunioevaluate.mobi
9 VTLive
investigate-verify-badge.info
7 VTLive
Screenshot of zerotrx.io
zerotrx.io
7 VTLivetron
Screenshot of zerotrx.io
zerotrx.io
Screenshot of binaryworldtrade.live
binaryworldtrade.live
6 VTLive
Screenshot of binaryworldtrade.live
binaryworldtrade.live
Screenshot of immediateintalai.pro
immediateintalai.pro
6 VTLive
Screenshot of immediateintalai.pro
immediateintalai.pro
Screenshot of admin.kraken.com.sc
admin.kraken.com.sc
5 VTUnknownKraken
Screenshot of admin.kraken.com.sc
admin.kraken.com.sc
Screenshot of blueroute.live
blueroute.live
4 VTCloaked · Livefacebook
Screenshot of blueroute.live
blueroute.live
Screenshot of flowx2.life
flowx2.life
4 VTCloaked · Live
Screenshot of flowx2.life
flowx2.life
mjunioevaluate.mobi
4 VTLive
cpcalendars.immediateintalai.pro
3 VTLive
Screenshot of teisla-growth.live
teisla-growth.live
3 VTUnknownethereum
Screenshot of teisla-growth.live
teisla-growth.live
Screenshot of telelog.info
telelog.info
3 VTLive
Screenshot of telelog.info
telelog.info
Screenshot of wallet.kaspenet.io
wallet.kaspenet.io
3 VTUnknown
Screenshot of wallet.kaspenet.io
wallet.kaspenet.io
Screenshot of elirox.trading
elirox.trading
2 VTLivenear
Screenshot of elirox.trading
elirox.trading
Screenshot of estatex.sale
estatex.sale
2 VTUnknownMicrosoft
Screenshot of estatex.sale
estatex.sale
Screenshot of kronex.life
kronex.life
2 VTLiveaave
Screenshot of kronex.life
kronex.life
autodiscover.immediateintalai.pro
1 VTLive
cpanel.immediateintalai.pro
1 VTLive
cpcontacts.immediateintalai.pro
1 VTLive
kronex.cafe
1 VTUnknownaave
Screenshot of walnetconnects.live
walnetconnects.live
1 VTLiveWalletConnect
Screenshot of walnetconnects.live
walnetconnects.live
bruteforce.team
Livediscord
Screenshot of fpmarket.group
fpmarket.group
Live
Screenshot of fpmarket.group
fpmarket.group

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,522 Cloudflare, Inc. 21,098 GoDaddy.com, LLC 9,284 Gname.com Pte. Ltd. 7,948 PDR Ltd. d/b/a PublicD... 7,780 DYNADOT LLC 7,382 NameSilo, LLC 6,916 NameCheap, Inc. 5,624 Dynadot Inc 4,983 Web Commerce Communica... 4,139 Global Domain Group LLC 4,035 Tucows Domains Inc. 3,668 Fewmoretaps OU d/b/a T... 3,476 HOSTINGER operations, UAB 3,167 Dominet (HK) Limited 2,430 GitHub, Inc. 2,385 MarkMonitor, Inc. 2,141 Spaceship, Inc. 2,004 OwnRegistrar, Inc. 1,936 NameMart Pte. Ltd. 1,863 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 Hosting Concepts B.V. ... 1,528 MAT BAO CORPORATION 1,466 TuringSign Inc. d/b/a ... 1,413 Ultahost, Inc. 1,398 MarkMonitor Inc. 1,395 Key-Systems GmbH 1,385 REGRU-RU 1,375 NAMECHEAP INC 1,319

Showing 36 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,594 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 30 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 166,757 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,848 Airdrop Scam 6,252 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 235 Recovery Scam 97 Verification Scam 67 Giveaway Scam 57 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,446 across 6,207 Google 5,809 Coinbase 4,093 Trezor 3,064 Solana 2,888 genericcloudflare 2,862 Ethereum 2,782 MetaMask 2,772 Binance 2,497 Kraken 2,440 Facebook 2,059 Microsoft 1,743 cryptoscam 1,694 Bet365 1,607 Apple 1,384 x.com 1,362 base 1,256 discord 1,167

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,971 Seed Phrase Theft 17 Airdrop Scam 8,051 Investment Scam 310

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust

Site links