Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,299
Total Tracked
193,299
VT Detected
86,006
Last Seen Active
98,475
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,128
Phishing Domains
690
Still Alive
438
Taken Down
98.5%
Detection Rate
7.4
Avg VT Score
61.2%
Alive Rate
1,128 phishing-domain abuse reports sent: Ultahost, Inc.
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,128 domains registered through Ultahost, Inc., so the primary report total is 1,128. Database coverage starts Jul 23, 2025. 61% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 791 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 20, 2026
Ultahost, Inc. 1,128 domains
Screenshot of forexwiredaily.com
forexwiredaily.com
10 VTActive
Screenshot of forexwiredaily.com
forexwiredaily.com
Screenshot of katanapresale.xyz
katanapresale.xyz
10 VTUnknownbinance
Screenshot of katanapresale.xyz
katanapresale.xyz
kronex.loan
10 VTActive
Screenshot of lighterairdrop.xyz
lighterairdrop.xyz
10 VTUnknowndiscord
Screenshot of lighterairdrop.xyz
lighterairdrop.xyz
Screenshot of metachainex.com
metachainex.com
10 VTActivegenericscam
Screenshot of metachainex.com
metachainex.com
Screenshot of metrocapitalpro.com
metrocapitalpro.com
10 VTCloaked · Liveacross
Screenshot of metrocapitalpro.com
metrocapitalpro.com
Screenshot of mrtaraccar.com
mrtaraccar.com
10 VTActive
Screenshot of mrtaraccar.com
mrtaraccar.com
Screenshot of national-credit-union.online
national-credit-union.online
10 VTUnknown
Screenshot of national-credit-union.online
national-credit-union.online
Screenshot of peakcapitalpro.com
peakcapitalpro.com
10 VTCloaked · Live
Screenshot of peakcapitalpro.com
peakcapitalpro.com
Screenshot of prowebtrade.com
prowebtrade.com
10 VTActive
Screenshot of prowebtrade.com
prowebtrade.com
Screenshot of puretrustonline.com
puretrustonline.com
10 VTTaken Down["foundation"]
Screenshot of puretrustonline.com
puretrustonline.com
Screenshot of rabbysecuredapp.com
rabbysecuredapp.com
10 VTUnknownrabby
Screenshot of rabbysecuredapp.com
rabbysecuredapp.com
robinhoodchecker.com
10 VTActiveRobinhood
Screenshot of sterlingvests.com
sterlingvests.com
10 VTActive["foundation"]
Screenshot of sterlingvests.com
sterlingvests.com
Screenshot of techrapidz.com
techrapidz.com
10 VTActive
Screenshot of techrapidz.com
techrapidz.com
Screenshot of toyerhair.com
toyerhair.com
10 VTActive
Screenshot of toyerhair.com
toyerhair.com
Screenshot of treldisbank.com
treldisbank.com
10 VTTaken Downgenericbanking
Screenshot of treldisbank.com
treldisbank.com
Screenshot of trustwallet-insure.com
trustwallet-insure.com
10 VTTaken DownTrust Wallet
Screenshot of trustwallet-insure.com
trustwallet-insure.com
userauthsecureverification.com
10 VTActive
Screenshot of venturebankcorp.com
venturebankcorp.com
10 VTTaken Downgenericbanking
Screenshot of venturebankcorp.com
venturebankcorp.com
verifyuserauth.com
10 VTActive
Screenshot of www.authweb3user.com
www.authweb3user.com
10 VTTaken DownAngel Drainer
Screenshot of www.authweb3user.com
www.authweb3user.com
Screenshot of www.trustwallcard.com
www.trustwallcard.com
10 VTTaken Downmastercard
Screenshot of www.trustwallcard.com
www.trustwallcard.com
Screenshot of www.trustwalletconnect.net
www.trustwalletconnect.net
10 VTTaken DownTrust Wallet
Screenshot of www.trustwalletconnect.net
www.trustwalletconnect.net
Screenshot of www.westrustbankintl.us.novatransporte.com
www.westrustbankintl.us.novatransporte.com
10 VTTaken Down
Screenshot of www.westrustbankintl.us.novatransporte.com
www.westrustbankintl.us.novatransporte.com
Screenshot of zelvionbank.com
zelvionbank.com
10 VTUnknowngenericbanking
Screenshot of zelvionbank.com
zelvionbank.com
Screenshot of 8qyslgi.com
8qyslgi.com
9 VTActiveBitcoin
Screenshot of 8qyslgi.com
8qyslgi.com
Screenshot of acceleratorholdingsltd.com
acceleratorholdingsltd.com
9 VTActiveacross
Screenshot of acceleratorholdingsltd.com
acceleratorholdingsltd.com
aladdintradingsignal.com
9 VTActive
Screenshot of att-77.com
att-77.com
9 VTTaken Down
Screenshot of att-77.com
att-77.com
Screenshot of bcvbk.com
bcvbk.com
9 VTUnknowngenericbanking
Screenshot of bcvbk.com
bcvbk.com
Screenshot of bestforexthrive.com
bestforexthrive.com
9 VTActiveacross
Screenshot of bestforexthrive.com
bestforexthrive.com
business-04webzoom.com
9 VTActiveZoom
Screenshot of chainversedrop.com
chainversedrop.com
9 VTUnknownacross
Screenshot of chainversedrop.com
chainversedrop.com
comtrader.online
9 VTActive
Screenshot of expertsoptionstrading.com
expertsoptionstrading.com
9 VTActive
Screenshot of expertsoptionstrading.com
expertsoptionstrading.com
Screenshot of gadexpline.com
gadexpline.com
9 VTActive
Screenshot of gadexpline.com
gadexpline.com
Screenshot of goopentext.com
goopentext.com
9 VTActive
Screenshot of goopentext.com
goopentext.com
Screenshot of groveroption.com
groveroption.com
9 VTActivelocalbitcoins
Screenshot of groveroption.com
groveroption.com
Screenshot of heritagefbk.com
heritagefbk.com
9 VTActivegenericbanking
Screenshot of heritagefbk.com
heritagefbk.com
hyperlane-app.com
9 VTActiveaave
Screenshot of intimchat.net
intimchat.net
9 VTCloaked · Live
Screenshot of intimchat.net
intimchat.net
Screenshot of luzicbank.com
luzicbank.com
9 VTUnknowngenericbanking
Screenshot of luzicbank.com
luzicbank.com
Screenshot of mail.trustwalletconnect.net
mail.trustwalletconnect.net
9 VTUnknownTrust Wallet
Screenshot of mail.trustwalletconnect.net
mail.trustwalletconnect.net
makemydocu.com
9 VTActive
Screenshot of maspriorityfunddept.com
maspriorityfunddept.com
9 VTActive
Screenshot of maspriorityfunddept.com
maspriorityfunddept.com
Screenshot of monad.monadworld.net
monad.monadworld.net
9 VTUnknownmonad
Screenshot of monad.monadworld.net
monad.monadworld.net
Screenshot of nexabullcapital.com
nexabullcapital.com
9 VTActive
Screenshot of nexabullcapital.com
nexabullcapital.com
Screenshot of represale.xyz
represale.xyz
9 VTTaken Downcoinbase
Screenshot of represale.xyz
represale.xyz
Screenshot of rialotoken.xyz
rialotoken.xyz
9 VTTaken Downbinance
Screenshot of rialotoken.xyz
rialotoken.xyz
Screenshot of safenodegarphics.com
safenodegarphics.com
9 VTActive
Screenshot of safenodegarphics.com
safenodegarphics.com
Screenshot of secureauthweb3.net
secureauthweb3.net
9 VTTaken DownAngel Drainer
Screenshot of secureauthweb3.net
secureauthweb3.net
Screenshot of solvenexchequer.com
solvenexchequer.com
9 VTActive["foundation"]
Screenshot of solvenexchequer.com
solvenexchequer.com
Screenshot of stockwisefx.com
stockwisefx.com
9 VTCloaked · Live
Screenshot of stockwisefx.com
stockwisefx.com
Screenshot of swifttd.com
swifttd.com
9 VTCloaked · Live
Screenshot of swifttd.com
swifttd.com
Screenshot of swiscodelivery.com
swiscodelivery.com
9 VTActive
Screenshot of swiscodelivery.com
swiscodelivery.com
Screenshot of tabitoken.xyz
tabitoken.xyz
9 VTTaken Downbnb chain
Screenshot of tabitoken.xyz
tabitoken.xyz
Screenshot of trustfbk.com
trustfbk.com
9 VTCloaked · Liveamerican express
Screenshot of trustfbk.com
trustfbk.com
Screenshot of trustwalletconnect.net.trustalpha.net
trustwalletconnect.net.trustalpha.net
9 VTTaken DownTrust Wallet
Screenshot of trustwalletconnect.net.trustalpha.net
trustwalletconnect.net.trustalpha.net
Screenshot of unclealmaz.com
unclealmaz.com
9 VTActive
Screenshot of unclealmaz.com
unclealmaz.com
Screenshot of valoreal-capital.com
valoreal-capital.com
9 VTTaken Downgoogle
Screenshot of valoreal-capital.com
valoreal-capital.com
Screenshot of virexacapital.com
virexacapital.com
9 VTActivegenericscam
Screenshot of virexacapital.com
virexacapital.com
Screenshot of web3userauthentication.com
web3userauthentication.com
9 VTTaken DownAngel Drainer
Screenshot of web3userauthentication.com
web3userauthentication.com
Screenshot of web3userauthorization.com
web3userauthorization.com
9 VTTaken Down
Screenshot of web3userauthorization.com
web3userauthorization.com
Screenshot of wflshield.com
wflshield.com
9 VTActive
Screenshot of wflshield.com
wflshield.com
Screenshot of 826436.com
826436.com
8 VTUnknown
Screenshot of 826436.com
826436.com
Screenshot of abstractairdrops.xyz
abstractairdrops.xyz
8 VTTaken Down
Screenshot of abstractairdrops.xyz
abstractairdrops.xyz
Screenshot of ads-support-central.store
ads-support-central.store
8 VTActivefacebook
Screenshot of ads-support-central.store
ads-support-central.store
Screenshot of ai-vantagetrading.com
ai-vantagetrading.com
8 VTActiveInvestment Scam
Screenshot of ai-vantagetrading.com
ai-vantagetrading.com
airdropgiveaway.com
8 VTActive
Screenshot of basewalletsupportservice.parclixlogistics.com
basewalletsupportservice.parclixlogistics.com
8 VTUnknown
Screenshot of basewalletsupportservice.parclixlogistics.com
basewalletsupportservice.parclixlogistics.com
Screenshot of bitcoretrade.com
bitcoretrade.com
8 VTActive
Screenshot of bitcoretrade.com
bitcoretrade.com
Screenshot of buycertificatesonline.com
buycertificatesonline.com
8 VTActive
Screenshot of buycertificatesonline.com
buycertificatesonline.com
capitaltrustgate.com
8 VTActive
Screenshot of customerweb3auth.net
customerweb3auth.net
8 VTUnknownAngel Drainer
Screenshot of customerweb3auth.net
customerweb3auth.net
Screenshot of fogoairdrop.xyz
fogoairdrop.xyz
8 VTUnknown
Screenshot of fogoairdrop.xyz
fogoairdrop.xyz
Screenshot of frontiertraders-spcx.com
frontiertraders-spcx.com
8 VTActivedhl
Screenshot of frontiertraders-spcx.com
frontiertraders-spcx.com
fundlify-trades.net
8 VTActive
Screenshot of gmail-transfer.com
gmail-transfer.com
8 VTActive
Screenshot of gmail-transfer.com
gmail-transfer.com
grok73k-cointelegraph.com
8 VTUnknown
Screenshot of hudsondigitalcorporation.com
hudsondigitalcorporation.com
8 VTUnknownacross
Screenshot of hudsondigitalcorporation.com
hudsondigitalcorporation.com
Screenshot of huobiget.com
huobiget.com
8 VTUnknownHTX
Screenshot of huobiget.com
huobiget.com
Screenshot of infohubsource.net
infohubsource.net
8 VTActiveGoogle
Screenshot of infohubsource.net
infohubsource.net
Screenshot of lagerl0f.com
lagerl0f.com
8 VTTaken DownBitcoin
Screenshot of lagerl0f.com
lagerl0f.com
Screenshot of mail.optivests.online
mail.optivests.online
8 VTActiveacross
Screenshot of mail.optivests.online
mail.optivests.online
Screenshot of masdeptgov.com
masdeptgov.com
8 VTActive
Screenshot of masdeptgov.com
masdeptgov.com
Screenshot of metricedgevault.com.peakcapitalpro.com
metricedgevault.com.peakcapitalpro.com
8 VTActive
Screenshot of metricedgevault.com.peakcapitalpro.com
metricedgevault.com.peakcapitalpro.com
Screenshot of motusbnk.online
motusbnk.online
8 VTActive
Screenshot of motusbnk.online
motusbnk.online
Screenshot of olixcredit.com
olixcredit.com
8 VTActivegenericbanking
Screenshot of olixcredit.com
olixcredit.com
onchainkeep.com
8 VTActive
Screenshot of polymarketairdrop.xyz
polymarketairdrop.xyz
8 VTUnknownacross
Screenshot of polymarketairdrop.xyz
polymarketairdrop.xyz
Screenshot of premiersafefinance.com
premiersafefinance.com
8 VTActive
Screenshot of premiersafefinance.com
premiersafefinance.com
Screenshot of pument.online
pument.online
8 VTActive
Screenshot of pument.online
pument.online
Screenshot of robust-assist.com
robust-assist.com
8 VTActive
Screenshot of robust-assist.com
robust-assist.com
Screenshot of roseedskin.com
roseedskin.com
8 VTActive
Screenshot of roseedskin.com
roseedskin.com
Screenshot of sending-erc-usdt.site
sending-erc-usdt.site
8 VTActiveTrust Wallet
Screenshot of sending-erc-usdt.site
sending-erc-usdt.site
Screenshot of southerncrestinv.com
southerncrestinv.com
8 VTTaken Down["tiktok"]
Screenshot of southerncrestinv.com
southerncrestinv.com
Screenshot of statesfederalunion.com
statesfederalunion.com
8 VTActivegenericbanking
Screenshot of statesfederalunion.com
statesfederalunion.com
Screenshot of support-advertisiespollcy.com
support-advertisiespollcy.com
8 VTCloaked · Liveacross
Screenshot of support-advertisiespollcy.com
support-advertisiespollcy.com
Screenshot of tajadeen.com
tajadeen.com
8 VTActive
Screenshot of tajadeen.com
tajadeen.com
« Prev 1 2 3 4 5 6 7 Next » Page 4 of 12

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,687 Cloudflare 21,448 Dynadot 10,748 PDR Ltd. d/b/a PublicDomainRe... 7,987 Namecheap 7,704 GoDaddy 6,621 Gname.com Pte. Ltd. 6,495 NameSilo 6,452 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,189 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,376 GitHub, Inc. 2,720 Vercel 2,710 MarkMonitor 2,582 Dominet (HK) Limited 2,175 Spaceship, Inc. 2,115 OwnRegistrar, Inc. 2,006 Netlify 1,875 Hosting Concepts B.V. d/b/a R... 1,720 Cloudflare Pages 1,696 Name.com 1,650 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,436 Key-Systems 1,403 REGRU-RU 1,382 Squarespace Domains II 1,274

Showing 1,128 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,732 genericcrypto 7,712 across 6,799 Google 6,336 Coinbase 4,195 MetaMask 3,715 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,480 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,565 Apple 1,541 x.com 1,439 base 1,426 Bet365 1,306 Microsoft 1,303

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,023 Seed Phrase Theft 19 Airdrop Scam 8,272 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust