Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

0
Total Tracked
0
VT Detected
0
Last Seen Active
0
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,261
Phishing Domains
788
Still Alive
421
Taken Down
96.2%
Detection Rate
6.7
Avg VT Score
62.5%
Alive Rate
546 Abuse Reports Sent to Ultahost, Inc.
PhishDestroy has filed 546 abuse reports covering 546 phishing domains registered through Ultahost, Inc.. Reports sent since Jan 2, 2026. 144% of reported domains remain active, suggesting inadequate enforcement of abuse policies.
96.2% of domains flagged by VirusTotal 740 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Jul 27, 2026
Ultahost, Inc. 1,261 domains
renouvelez-votre-souscription.com
1 VTCloaked · Live
royalfuiib.com
1 VTLive
Screenshot of safenodegarphics.com
safenodegarphics.com
1 VTUnknown
Screenshot of safenodegarphics.com
safenodegarphics.com
skysafesecurity.com
1 VTUnknown
skysafesecurity.com.netsafehost.com
1 VTLive
Screenshot of skywstrd.com
skywstrd.com
1 VTUnknown
Screenshot of skywstrd.com
skywstrd.com
Screenshot of tokensdapponline.com
tokensdapponline.com
1 VTUnknown
Screenshot of tokensdapponline.com
tokensdapponline.com
Screenshot of vanderlex.com
vanderlex.com
1 VTCloaked · Live
Screenshot of vanderlex.com
vanderlex.com
Screenshot of verify-moonpay.com
verify-moonpay.com
1 VTLive
Screenshot of verify-moonpay.com
verify-moonpay.com
Screenshot of vurextueow.com
vurextueow.com
1 VTUnknown
Screenshot of vurextueow.com
vurextueow.com
Screenshot of web3qfs.com
web3qfs.com
1 VTUnknownacross
Screenshot of web3qfs.com
web3qfs.com
webmail.lunariswavebk.com
1 VTLive
www.trusticard.com
1 VTUnknown
Screenshot of ads-support-verification.com
ads-support-verification.com
Unknown
Screenshot of ads-support-verification.com
ads-support-verification.com
autoconfig.tradesphereinternational.com
Live
autodiscover.kivatrade.com
Live
autodiscover.royalfuiib.com
Live
autodiscover.tradesphereinternational.com
LiveMicrosoft
Screenshot of backupweb3.com
backupweb3.com
Cloaked · Live
Screenshot of backupweb3.com
backupweb3.com
Screenshot of based-investment.com
based-investment.com
LiveCoinbase
Screenshot of based-investment.com
based-investment.com
Screenshot of coinaids.com
coinaids.com
Live
Screenshot of coinaids.com
coinaids.com
cpanel.findgespro.com
Live
cpanel.kivatrade.com
Live
cpanel.tradesphereinternational.com
Live
cpcalendars.findgespro.com
Live
cpcontacts.findgespro.com
Live
cxbull.com
Unknown
Screenshot of dappvaulttools.xyz
dappvaulttools.xyz
Livebinance
Screenshot of dappvaulttools.xyz
dappvaulttools.xyz
Screenshot of doculico.com
doculico.com
Live
Screenshot of doculico.com
doculico.com
gro43d.com
Live
gro79a-cryptoslate.com
Live
gro79a.com
Live
Screenshot of grok-46k.com
grok-46k.com
Live
Screenshot of grok-46k.com
grok-46k.com
Screenshot of grok26k.com
grok26k.com
Unknown
Screenshot of grok26k.com
grok26k.com
Screenshot of grok46k-fxempire.com
grok46k-fxempire.com
Unknown
Screenshot of grok46k-fxempire.com
grok46k-fxempire.com
Screenshot of grok54h-cryptoslate.com
grok54h-cryptoslate.com
Unknown
Screenshot of grok54h-cryptoslate.com
grok54h-cryptoslate.com
Screenshot of grok87k-fxempire.com
grok87k-fxempire.com
Live
Screenshot of grok87k-fxempire.com
grok87k-fxempire.com
Screenshot of hashpackapp.net
hashpackapp.net
Cloaked · Livediscord
Screenshot of hashpackapp.net
hashpackapp.net
Screenshot of hyperfoundation-secure.com
hyperfoundation-secure.com
Taken Down
Screenshot of hyperfoundation-secure.com
hyperfoundation-secure.com
Screenshot of info-vanderlex.com
info-vanderlex.com
Live
Screenshot of info-vanderlex.com
info-vanderlex.com
Screenshot of jewlistic.com
jewlistic.com
Live
Screenshot of jewlistic.com
jewlistic.com
Screenshot of keplruserauth.com
keplruserauth.com
Live
Screenshot of keplruserauth.com
keplruserauth.com
kivatrade.com
Live
mrbeastofficialcoin.com
Live
Screenshot of oxidefai.com
oxidefai.com
Live
Screenshot of oxidefai.com
oxidefai.com
Screenshot of paprnest.com
paprnest.com
Live
Screenshot of paprnest.com
paprnest.com
premiersafefinance.com.royalfuiib.com
Live
Screenshot of qnesara-gesara.com
qnesara-gesara.com
Live
Screenshot of qnesara-gesara.com
qnesara-gesara.com
Screenshot of quantumledgertradefi.com
quantumledgertradefi.com
Cloaked · LiveLedger
Screenshot of quantumledgertradefi.com
quantumledgertradefi.com
Screenshot of quantumsecurelab.com
quantumsecurelab.com
Live
Screenshot of quantumsecurelab.com
quantumsecurelab.com
Screenshot of secureuserauth.org
secureuserauth.org
Live
Screenshot of secureuserauth.org
secureuserauth.org
Screenshot of shaheenadv2.com
shaheenadv2.com
Unknown
Screenshot of shaheenadv2.com
shaheenadv2.com
Screenshot of shopeeclaim.com
shopeeclaim.com
UnknownShopeePay
Screenshot of shopeeclaim.com
shopeeclaim.com
Screenshot of spkflresconnect.xyz
spkflresconnect.xyz
Livebinance
Screenshot of spkflresconnect.xyz
spkflresconnect.xyz
Screenshot of storylineworks.com
storylineworks.com
Live
Screenshot of storylineworks.com
storylineworks.com
Screenshot of tecnoimpianti-srl.com
tecnoimpianti-srl.com
Live
Screenshot of tecnoimpianti-srl.com
tecnoimpianti-srl.com
Screenshot of usersecureauth.com
usersecureauth.com
Live
Screenshot of usersecureauth.com
usersecureauth.com
Screenshot of walletguards.site
walletguards.site
Live
Screenshot of walletguards.site
walletguards.site
webdisk.varmeshrek.com
Live
Screenshot of www.receiver-heleket.com
www.receiver-heleket.com
Unknown["ethereum"]
Screenshot of www.receiver-heleket.com
www.receiver-heleket.com
Screenshot of www.trust-amlcheck.com
www.trust-amlcheck.com
Unknown
Screenshot of www.trust-amlcheck.com
www.trust-amlcheck.com
« Prev 10 11 12 13 Page 13 of 13

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,348 Cloudflare, Inc. 21,083 GoDaddy.com, LLC 9,264 Gname.com Pte. Ltd. 7,933 PDR Ltd. d/b/a PublicD... 7,720 DYNADOT LLC 7,377 NameSilo, LLC 6,897 NameCheap, Inc. 5,624 Dynadot Inc 4,954 Web Commerce Communica... 4,139 Global Domain Group LLC 3,969 Tucows Domains Inc. 3,667 Fewmoretaps OU d/b/a T... 3,340 HOSTINGER operations, UAB 3,156 Dominet (HK) Limited 2,410 GitHub, Inc. 2,335 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,996 OwnRegistrar, Inc. 1,935 NameMart Pte. Ltd. 1,858 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,453 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,382 REGRU-RU 1,374 NAMECHEAP INC 1,290 Ultahost, Inc. 1,261

Showing 1,261 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,593 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,836 Airdrop Scam 6,249 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 230 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Phishing 31 Staking Scam 7 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,402 Google 5,368 across 5,120 Coinbase 3,941 Trezor 3,057 genericcloudflare 2,862 Solana 2,849 Ethereum 2,546 Kraken 2,405 MetaMask 2,335 Binance 2,230 Facebook 1,922 Microsoft 1,784 cryptoscam 1,694 Bet365 1,604 x.com 1,360 Apple 1,234 Trust Wallet 1,116 discord 1,078

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,965 Seed Phrase Theft 17 Airdrop Scam 8,030 Investment Scam 310

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust

Site links