Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

0
Total Tracked
0
VT Detected
0
Last Seen Active
0
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,261
Phishing Domains
788
Still Alive
421
Taken Down
96.2%
Detection Rate
6.7
Avg VT Score
62.5%
Alive Rate
546 Abuse Reports Sent to Ultahost, Inc.
PhishDestroy has filed 546 abuse reports covering 546 phishing domains registered through Ultahost, Inc.. Reports sent since Jan 2, 2026. 144% of reported domains remain active, suggesting inadequate enforcement of abuse policies.
96.2% of domains flagged by VirusTotal 740 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Jul 27, 2026
Ultahost, Inc. 1,261 domains
premiumsfiat.com
2 VTUnknown
Screenshot of pulsex-pulsechain.com
pulsex-pulsechain.com
2 VTUnknown
Screenshot of pulsex-pulsechain.com
pulsex-pulsechain.com
Screenshot of pxbble.com
pxbble.com
2 VTLive
Screenshot of pxbble.com
pxbble.com
Screenshot of qfscoldstorage.com
qfscoldstorage.com
2 VTUnknownLedger
Screenshot of qfscoldstorage.com
qfscoldstorage.com
Screenshot of quantumfinalsystem.com
quantumfinalsystem.com
2 VTUnknown
Screenshot of quantumfinalsystem.com
quantumfinalsystem.com
quickrcourierdelivry.online.capitaltrustybk.com
2 VTLive
safex.lat
2 VTLiveSolana
Screenshot of shaventrade.com.stableprimeinv.org
shaventrade.com.stableprimeinv.org
2 VTUnknown
Screenshot of shaventrade.com.stableprimeinv.org
shaventrade.com.stableprimeinv.org
spantora.online
2 VTLive
Screenshot of store.coinbasetrading.net
store.coinbasetrading.net
2 VTLiveCoinbase
Screenshot of store.coinbasetrading.net
store.coinbasetrading.net
Screenshot of swisstradeai.com
swisstradeai.com
2 VTLive
Screenshot of swisstradeai.com
swisstradeai.com
synchronize-device.online
2 VTCloaked · Live
synchronize-device.online.mou-euro.online
2 VTLive
Screenshot of tradesphereinternational.com
tradesphereinternational.com
2 VTLivegenericscam
Screenshot of tradesphereinternational.com
tradesphereinternational.com
Screenshot of trezorsuitesecurity.com
trezorsuitesecurity.com
2 VTUnknownTrezor
Screenshot of trezorsuitesecurity.com
trezorsuitesecurity.com
Screenshot of trezorsuiteusersecurity.com
trezorsuiteusersecurity.com
2 VTUnknownTrezor
Screenshot of trezorsuiteusersecurity.com
trezorsuiteusersecurity.com
Screenshot of web3.medinavaseattle.com
web3.medinavaseattle.com
2 VTUnknown
Screenshot of web3.medinavaseattle.com
web3.medinavaseattle.com
Screenshot of web3authenticator.com
web3authenticator.com
2 VTUnknown
Screenshot of web3authenticator.com
web3authenticator.com
Screenshot of web3insight.org.qnesara-gesara.com
web3insight.org.qnesara-gesara.com
2 VTLive
Screenshot of web3insight.org.qnesara-gesara.com
web3insight.org.qnesara-gesara.com
webmail.denzb.com
2 VTLive
webmail.lottovzla.online
2 VTLive
Screenshot of www.amlcheckbot.org
www.amlcheckbot.org
2 VTUnknown
Screenshot of www.amlcheckbot.org
www.amlcheckbot.org
Screenshot of www.app-coingate.com
www.app-coingate.com
2 VTUnknown
Screenshot of www.app-coingate.com
www.app-coingate.com
Screenshot of www.check-heleket.com
www.check-heleket.com
2 VTUnknown
Screenshot of www.check-heleket.com
www.check-heleket.com
Screenshot of www.chekingaml.com
www.chekingaml.com
2 VTUnknownledger
Screenshot of www.chekingaml.com
www.chekingaml.com
Screenshot of www.failsafesecureauthenticate.com
www.failsafesecureauthenticate.com
2 VTUnknown
Screenshot of www.failsafesecureauthenticate.com
www.failsafesecureauthenticate.com
Screenshot of www.send-cryptomus.com
www.send-cryptomus.com
2 VTUnknownledger
Screenshot of www.send-cryptomus.com
www.send-cryptomus.com
Screenshot of www.trademegastocks.com
www.trademegastocks.com
2 VTUnknowngenericscam
Screenshot of www.trademegastocks.com
www.trademegastocks.com
Screenshot of www.web3authcustomer.com
www.web3authcustomer.com
2 VTUnknownAngel Drainer
Screenshot of www.web3authcustomer.com
www.web3authcustomer.com
Screenshot of aerodromeslipstream.com
aerodromeslipstream.com
1 VTUnknownaave
Screenshot of aerodromeslipstream.com
aerodromeslipstream.com
Screenshot of airdropledger.com.cornixbots.com
airdropledger.com.cornixbots.com
1 VTUnknownacross
Screenshot of airdropledger.com.cornixbots.com
airdropledger.com.cornixbots.com
alverionis.com
1 VTLive
Screenshot of amlfinancecheck.com
amlfinancecheck.com
1 VTUnknownacross
Screenshot of amlfinancecheck.com
amlfinancecheck.com
Screenshot of aonecapitals.com
aonecapitals.com
1 VTUnknown
Screenshot of aonecapitals.com
aonecapitals.com
Screenshot of audit-ledger.com
audit-ledger.com
1 VTUnknownLedger
Screenshot of audit-ledger.com
audit-ledger.com
Screenshot of aurumtrustglobal.com
aurumtrustglobal.com
1 VTUnknownacross
Screenshot of aurumtrustglobal.com
aurumtrustglobal.com
authenticatenode.com
1 VTLive
autodiscover.apextrades.org
1 VTLive
autodiscover.fbghonline.com
1 VTLive
autodiscover.netsafehost.com
1 VTLive
autodiscover.pillarsbank.com
1 VTLive
autodiscover.quantumledgertradefi.com
1 VTLiveLedger
autodiscover.unitedfxtradings.com
1 VTLive
Screenshot of binance-promotions.com
binance-promotions.com
1 VTUnknownBinance
Screenshot of binance-promotions.com
binance-promotions.com
Screenshot of blockchain-payments.com
blockchain-payments.com
1 VTLiveBlockchain.com
Screenshot of blockchain-payments.com
blockchain-payments.com
Screenshot of bravefundpro.com
bravefundpro.com
1 VTUnknown
Screenshot of bravefundpro.com
bravefundpro.com
Screenshot of caminnovativecorp.com
caminnovativecorp.com
1 VTUnknown
Screenshot of caminnovativecorp.com
caminnovativecorp.com
Screenshot of countrycapitalmc.org
countrycapitalmc.org
1 VTUnknown
Screenshot of countrycapitalmc.org
countrycapitalmc.org
cpanel.apextrades.org
1 VTLive
cpanel.edelfinancesuisse.com
1 VTLive
cpanel.lunariswavebk.com
1 VTLive
cpanel.netsafehost.com
1 VTLive
cpanel.pillarsbank.com
1 VTLive
cpanel.quantumledgertradefi.com
1 VTLiveLedger
cpanel.sapphireunionmarket.com
1 VTLive
cpanel.uloufodede.com
1 VTLive
cpanel.unitedfxtradings.com
1 VTLive
cpcalendars.apextrades.org
1 VTLive
cpcalendars.edelfinancesuisse.com
1 VTLive
cpcalendars.lunariswavebk.com
1 VTLiveApple
cpcalendars.netsafehost.com
1 VTLive
cpcalendars.uloufodede.com
1 VTLive
cpcalendars.unitedfxtradings.com
1 VTLive
cpcontacts.apextrades.org
1 VTLive
cpcontacts.edelfinancesuisse.com
1 VTLive
cpcontacts.lunariswavebk.com
1 VTLive
cpcontacts.netsafehost.com
1 VTLive
cpcontacts.uloufodede.com
1 VTLive
cpcontacts.unitedfxtradings.com
1 VTLive
Screenshot of creativetextmarketing.com
creativetextmarketing.com
1 VTUnknown
Screenshot of creativetextmarketing.com
creativetextmarketing.com
Screenshot of escrowcryptogroup.com
escrowcryptogroup.com
1 VTUnknown
Screenshot of escrowcryptogroup.com
escrowcryptogroup.com
eurofreighthub.com.edelfinancesuisse.com
1 VTLive
Screenshot of ezboxdelivery.com
ezboxdelivery.com
1 VTUnknown
Screenshot of ezboxdelivery.com
ezboxdelivery.com
Screenshot of ezdoccreator.com
ezdoccreator.com
1 VTUnknown["gmail"]
Screenshot of ezdoccreator.com
ezdoccreator.com
Screenshot of fairexpresslogistic.com
fairexpresslogistic.com
1 VTUnknown
Screenshot of fairexpresslogistic.com
fairexpresslogistic.com
Screenshot of fbghonline.com
fbghonline.com
1 VTCloaked · Live
Screenshot of fbghonline.com
fbghonline.com
fidstan.com.uloufodede.com
1 VTLive
Screenshot of finans-globe.net
finans-globe.net
1 VTUnknown
Screenshot of finans-globe.net
finans-globe.net
Screenshot of firstpriorityexpress.com
firstpriorityexpress.com
1 VTUnknown["google"]
Screenshot of firstpriorityexpress.com
firstpriorityexpress.com
Screenshot of flexiwebonline.com
flexiwebonline.com
1 VTUnknown["gmail"]
Screenshot of flexiwebonline.com
flexiwebonline.com
Screenshot of gavelventurelimited.com
gavelventurelimited.com
1 VTUnknownacross
Screenshot of gavelventurelimited.com
gavelventurelimited.com
Screenshot of globalfinancealliance.com
globalfinancealliance.com
1 VTUnknown
Screenshot of globalfinancealliance.com
globalfinancealliance.com
gro31q-cointelegraph.com
1 VTLive
Screenshot of grok28g-cryptoslate.com
grok28g-cryptoslate.com
1 VTUnknown
Screenshot of grok28g-cryptoslate.com
grok28g-cryptoslate.com
Screenshot of iecapitals.com
iecapitals.com
1 VTUnknown["google"]
Screenshot of iecapitals.com
iecapitals.com
Screenshot of investmentmanagementtrust.com
investmentmanagementtrust.com
1 VTUnknown
Screenshot of investmentmanagementtrust.com
investmentmanagementtrust.com
Screenshot of investswissic.com
investswissic.com
1 VTLive
Screenshot of investswissic.com
investswissic.com
inviteportal-web3.com
1 VTUnknownBybit
Screenshot of ledger-protect.org
ledger-protect.org
1 VTUnknownLedger
Screenshot of ledger-protect.org
ledger-protect.org
Screenshot of ledgerauthsync.com
ledgerauthsync.com
1 VTUnknownLedger
Screenshot of ledgerauthsync.com
ledgerauthsync.com
lunariswavebk.com
1 VTLive
Screenshot of marzban.novavpn.org
marzban.novavpn.org
1 VTUnknown["telegram"]
Screenshot of marzban.novavpn.org
marzban.novavpn.org
Screenshot of meritking1864.com
meritking1864.com
1 VTUnknownCloudflare
Screenshot of meritking1864.com
meritking1864.com
Screenshot of newagewest.com
newagewest.com
1 VTUnknown
Screenshot of newagewest.com
newagewest.com
Screenshot of novavpn.org
novavpn.org
1 VTUnknown["telegram"]
Screenshot of novavpn.org
novavpn.org
Screenshot of oumechrwq.com
oumechrwq.com
1 VTUnknown
Screenshot of oumechrwq.com
oumechrwq.com
Screenshot of pacificryptomarkets.com
pacificryptomarkets.com
1 VTUnknown
Screenshot of pacificryptomarkets.com
pacificryptomarkets.com
Screenshot of panel.novavpn.org
panel.novavpn.org
1 VTUnknown["telegram"]
Screenshot of panel.novavpn.org
panel.novavpn.org
Screenshot of plusdigtal.com
plusdigtal.com
1 VTTaken Down
Screenshot of plusdigtal.com
plusdigtal.com
portal.apextrades.org
1 VTLive
« Prev 9 10 11 12 13 Next » Page 12 of 13

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,348 Cloudflare, Inc. 21,083 GoDaddy.com, LLC 9,264 Gname.com Pte. Ltd. 7,933 PDR Ltd. d/b/a PublicD... 7,720 DYNADOT LLC 7,377 NameSilo, LLC 6,897 NameCheap, Inc. 5,624 Dynadot Inc 4,954 Web Commerce Communica... 4,139 Global Domain Group LLC 3,969 Tucows Domains Inc. 3,667 Fewmoretaps OU d/b/a T... 3,340 HOSTINGER operations, UAB 3,156 Dominet (HK) Limited 2,410 GitHub, Inc. 2,335 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,996 OwnRegistrar, Inc. 1,935 NameMart Pte. Ltd. 1,858 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,453 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,382 REGRU-RU 1,374 NAMECHEAP INC 1,290 Ultahost, Inc. 1,261

Showing 1,261 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,593 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,836 Airdrop Scam 6,249 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 230 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Phishing 31 Staking Scam 7 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,402 Google 5,368 across 5,120 Coinbase 3,941 Trezor 3,057 genericcloudflare 2,862 Solana 2,849 Ethereum 2,546 Kraken 2,405 MetaMask 2,335 Binance 2,230 Facebook 1,922 Microsoft 1,784 cryptoscam 1,694 Bet365 1,604 x.com 1,360 Apple 1,234 Trust Wallet 1,116 discord 1,078

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,965 Seed Phrase Theft 17 Airdrop Scam 8,030 Investment Scam 310

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust

Site links