Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,299
Total Tracked
193,299
VT Detected
86,006
Last Seen Active
98,475
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,128
Phishing Domains
690
Still Alive
438
Taken Down
98.5%
Detection Rate
7.4
Avg VT Score
61.2%
Alive Rate
1,128 phishing-domain abuse reports sent: Ultahost, Inc.
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,128 domains registered through Ultahost, Inc., so the primary report total is 1,128. Database coverage starts Jul 23, 2025. 61% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 791 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 20, 2026
Ultahost, Inc. 1,128 domains
tastyfx.org
8 VTActiveMetaMask
Screenshot of techtroveinvest.com
techtroveinvest.com
8 VTActive
Screenshot of techtroveinvest.com
techtroveinvest.com
Screenshot of tenderlytradepro.com
tenderlytradepro.com
8 VTTaken Downacross
Screenshot of tenderlytradepro.com
tenderlytradepro.com
Screenshot of transfers-usdt.org
transfers-usdt.org
8 VTTaken DownTrust Wallet
Screenshot of transfers-usdt.org
transfers-usdt.org
Screenshot of trustxandwill.com
trustxandwill.com
8 VTActive
Screenshot of trustxandwill.com
trustxandwill.com
Screenshot of turkceifsalar.xyz
turkceifsalar.xyz
8 VTTaken Down
Screenshot of turkceifsalar.xyz
turkceifsalar.xyz
Screenshot of usersecureauth.com
usersecureauth.com
8 VTActive
Screenshot of usersecureauth.com
usersecureauth.com
Screenshot of userweb3authenticate.com
userweb3authenticate.com
8 VTTaken DownAngel Drainermetamask
Screenshot of userweb3authenticate.com
userweb3authenticate.com
Screenshot of virtabanks.net
virtabanks.net
8 VTTaken Downgenericbanking
Screenshot of virtabanks.net
virtabanks.net
Screenshot of walletssetting.com
walletssetting.com
8 VTActive
Screenshot of walletssetting.com
walletssetting.com
Screenshot of web3-support.net
web3-support.net
8 VTUnknown
Screenshot of web3-support.net
web3-support.net
Screenshot of wellscreditunion.com
wellscreditunion.com
8 VTUnknown["foundation"]
Screenshot of wellscreditunion.com
wellscreditunion.com
Screenshot of www.userweb3auth.net
www.userweb3auth.net
8 VTTaken DownAngel Drainermetamask
Screenshot of www.userweb3auth.net
www.userweb3auth.net
Screenshot of www.userweb3authorization.com
www.userweb3authorization.com
8 VTTaken DownAngel Drainermetamask
Screenshot of www.userweb3authorization.com
www.userweb3authorization.com
Screenshot of www.userwebauth.net
www.userwebauth.net
8 VTTaken DownAngel Drainermetamask
Screenshot of www.userwebauth.net
www.userwebauth.net
Screenshot of yourwebaura.com
yourwebaura.com
8 VTActive
Screenshot of yourwebaura.com
yourwebaura.com
Screenshot of zoraxmobile.com
zoraxmobile.com
8 VTTaken Downgenericbanking
Screenshot of zoraxmobile.com
zoraxmobile.com
Screenshot of zyfro-valtix.com
zyfro-valtix.com
8 VTActive
Screenshot of zyfro-valtix.com
zyfro-valtix.com
Screenshot of aurena-defi.com
aurena-defi.com
7 VTActiveWallet Connect AbuseWalletConnect
Screenshot of aurena-defi.com
aurena-defi.com
Screenshot of basewebwallet.com
basewebwallet.com
7 VTActive
Screenshot of basewebwallet.com
basewebwallet.com
Screenshot of bestzins-online.com
bestzins-online.com
7 VTActive
Screenshot of bestzins-online.com
bestzins-online.com
Screenshot of bluetradesunionltd.com
bluetradesunionltd.com
7 VTUnknownBitcoin
Screenshot of bluetradesunionltd.com
bluetradesunionltd.com
Screenshot of busy-era.com
busy-era.com
7 VTActive
Screenshot of busy-era.com
busy-era.com
Screenshot of capitaltrustassets.online
capitaltrustassets.online
7 VTActive
Screenshot of capitaltrustassets.online
capitaltrustassets.online
cargateholdingltd.com
7 VTActive
Screenshot of chainnoder.com
chainnoder.com
7 VTUnknownSolana Drainerbinance
Screenshot of chainnoder.com
chainnoder.com
Screenshot of cityindextrading.com
cityindextrading.com
7 VTActive
Screenshot of cityindextrading.com
cityindextrading.com
Screenshot of claimps.com
claimps.com
7 VTActive
Screenshot of claimps.com
claimps.com
coreglobalminers.xyz
7 VTActive
Screenshot of cracked-krypton.com
cracked-krypton.com
7 VTActiveacross
Screenshot of cracked-krypton.com
cracked-krypton.com
dailytravels247.com
7 VTUnknownMetaMask
Screenshot of deconinvestment.com
deconinvestment.com
7 VTActivecryptoscam
Screenshot of deconinvestment.com
deconinvestment.com
Screenshot of denzb.com
denzb.com
7 VTActive
Screenshot of denzb.com
denzb.com
easy-signcoin.org
7 VTActive
Screenshot of enigmadaytrading.com
enigmadaytrading.com
7 VTActive
Screenshot of enigmadaytrading.com
enigmadaytrading.com
Screenshot of fdigitalholdings.com
fdigitalholdings.com
7 VTUnknown
Screenshot of fdigitalholdings.com
fdigitalholdings.com
Screenshot of globalradisson.com
globalradisson.com
7 VTUnknown
Screenshot of globalradisson.com
globalradisson.com
Screenshot of goldtrustltd.com
goldtrustltd.com
7 VTActive
Screenshot of goldtrustltd.com
goldtrustltd.com
Screenshot of heritagemercantilebnk.com
heritagemercantilebnk.com
7 VTActiveamerican express
Screenshot of heritagemercantilebnk.com
heritagemercantilebnk.com
Screenshot of highreturnpro.com
highreturnpro.com
7 VTActive
Screenshot of highreturnpro.com
highreturnpro.com
Screenshot of humanpassportairdrop.xyz
humanpassportairdrop.xyz
7 VTUnknownacross
Screenshot of humanpassportairdrop.xyz
humanpassportairdrop.xyz
Screenshot of husscard.com
husscard.com
7 VTActive
Screenshot of husscard.com
husscard.com
Screenshot of kalshipresale.xyz
kalshipresale.xyz
7 VTUnknownacross
Screenshot of kalshipresale.xyz
kalshipresale.xyz
Screenshot of kronex.date
kronex.date
7 VTActiveaave
Screenshot of kronex.date
kronex.date
Screenshot of metaplannet.com
metaplannet.com
7 VTActiveamazon
Screenshot of metaplannet.com
metaplannet.com
Screenshot of monadairdrops.xyz
monadairdrops.xyz
7 VTUnknowndiscord
Screenshot of monadairdrops.xyz
monadairdrops.xyz
mou-euro.online
7 VTActive
Screenshot of om1a.xyz
om1a.xyz
7 VTUnknownbase
Screenshot of om1a.xyz
om1a.xyz
Screenshot of onchaincult.com
onchaincult.com
7 VTActiveEthereum
Screenshot of onchaincult.com
onchaincult.com
onchainhashx.com
7 VTActive
Screenshot of polygontechlabs.com
polygontechlabs.com
7 VTActivePolygon
Screenshot of polygontechlabs.com
polygontechlabs.com
purevext.net
7 VTActive
Screenshot of raylsairdrop.xyz
raylsairdrop.xyz
7 VTUnknownacross
Screenshot of raylsairdrop.xyz
raylsairdrop.xyz
reconcreditcapital.com
7 VTActive
Screenshot of reserveng.net
reserveng.net
7 VTTaken Downgenericbanking
Screenshot of reserveng.net
reserveng.net
Screenshot of shieldweb3ledge.com
shieldweb3ledge.com
7 VTTaken Downcoinbase
Screenshot of shieldweb3ledge.com
shieldweb3ledge.com
Screenshot of sinarmakmursemarang.com
sinarmakmursemarang.com
7 VTCloaked · Live
Screenshot of sinarmakmursemarang.com
sinarmakmursemarang.com
Screenshot of spx21k.com
spx21k.com
7 VTUnknown
Screenshot of spx21k.com
spx21k.com
Screenshot of spx260k-centurylink.com
spx260k-centurylink.com
7 VTUnknown
Screenshot of spx260k-centurylink.com
spx260k-centurylink.com
Screenshot of stxvest.com
stxvest.com
7 VTUnknown
Screenshot of stxvest.com
stxvest.com
su04webzoom-business.com
7 VTActiveZoom
support-safekapital.com
7 VTActive
Screenshot of taxbridgefin.com
taxbridgefin.com
7 VTActive["mastercard"]
Screenshot of taxbridgefin.com
taxbridgefin.com
Screenshot of tradesphereinternational.com
tradesphereinternational.com
7 VTActivegenericscam
Screenshot of tradesphereinternational.com
tradesphereinternational.com
Screenshot of tws-finane.com
tws-finane.com
7 VTUnknown
Screenshot of tws-finane.com
tws-finane.com
Screenshot of wallxtrade.com
wallxtrade.com
7 VTActive
Screenshot of wallxtrade.com
wallxtrade.com
Screenshot of web3userauthsol.com
web3userauthsol.com
7 VTActive
Screenshot of web3userauthsol.com
web3userauthsol.com
Screenshot of windpathlogistics.com
windpathlogistics.com
7 VTTaken Down["across"]
Screenshot of windpathlogistics.com
windpathlogistics.com
Screenshot of www.fuelweb.xyz
www.fuelweb.xyz
7 VTTaken Downdiscord
Screenshot of www.fuelweb.xyz
www.fuelweb.xyz
Screenshot of www.web3authuser.com
www.web3authuser.com
7 VTTaken DownAngel Drainer
Screenshot of www.web3authuser.com
www.web3authuser.com
zefixglobalholdingsltd.com
7 VTActive
Screenshot of zentramobile.com
zentramobile.com
7 VTUnknowngenericbanking
Screenshot of zentramobile.com
zentramobile.com
Screenshot of zkverifyairdrop.xyz
zkverifyairdrop.xyz
7 VTTaken Down
Screenshot of zkverifyairdrop.xyz
zkverifyairdrop.xyz
093201-google.com
6 VTActiveGoogle
Screenshot of 14893coinbase.com
14893coinbase.com
6 VTTaken DownCoinbase
Screenshot of 14893coinbase.com
14893coinbase.com
345934-google.com
6 VTActiveGoogle
498491-ledger.com
6 VTActiveLedger
Screenshot of adixairdrop.xyz
adixairdrop.xyz
6 VTTaken Downacross
Screenshot of adixairdrop.xyz
adixairdrop.xyz
Screenshot of alignedpresale.xyz
alignedpresale.xyz
6 VTUnknownacross
Screenshot of alignedpresale.xyz
alignedpresale.xyz
andibella.com
6 VTUnknown
app.bluepeakglobal.net
6 VTUnknown
Screenshot of aprioriairdrop.xyz
aprioriairdrop.xyz
6 VTUnknown
Screenshot of aprioriairdrop.xyz
aprioriairdrop.xyz
Screenshot of archnetworkairdrop.xyz
archnetworkairdrop.xyz
6 VTUnknown
Screenshot of archnetworkairdrop.xyz
archnetworkairdrop.xyz
Screenshot of authedx.com
authedx.com
6 VTActive
Screenshot of authedx.com
authedx.com
authenticatenode.com
6 VTActive
Screenshot of authsecureuser.net
authsecureuser.net
6 VTUnknown
Screenshot of authsecureuser.net
authsecureuser.net
Screenshot of azimova.store
azimova.store
6 VTActive
Screenshot of azimova.store
azimova.store
Screenshot of bara-ai.com
bara-ai.com
6 VTActive
Screenshot of bara-ai.com
bara-ai.com
Screenshot of billionsairdrop.xyz
billionsairdrop.xyz
6 VTUnknownEthereum
Screenshot of billionsairdrop.xyz
billionsairdrop.xyz
Screenshot of bitactivation.com
bitactivation.com
6 VTActive
Screenshot of bitactivation.com
bitactivation.com
Screenshot of bitfury-tetherwave.com
bitfury-tetherwave.com
6 VTActive
Screenshot of bitfury-tetherwave.com
bitfury-tetherwave.com
Screenshot of bluexvest.com
bluexvest.com
6 VTUnknownacross
Screenshot of bluexvest.com
bluexvest.com
Screenshot of brevispresale.xyz
brevispresale.xyz
6 VTActivediscord
Screenshot of brevispresale.xyz
brevispresale.xyz
Screenshot of buildpadx.com
buildpadx.com
6 VTActiveSolana
Screenshot of buildpadx.com
buildpadx.com
Screenshot of buypassportsglobal.com
buypassportsglobal.com
6 VTActive
Screenshot of buypassportsglobal.com
buypassportsglobal.com
Screenshot of cases-coinspot.com
cases-coinspot.com
6 VTActiveGoogle
Screenshot of cases-coinspot.com
cases-coinspot.com
Screenshot of centralcapitalexchange.com
centralcapitalexchange.com
6 VTActivegenericscam
Screenshot of centralcapitalexchange.com
centralcapitalexchange.com
Screenshot of chainonlineverify.com
chainonlineverify.com
6 VTActiveAirdrop Scam
Screenshot of chainonlineverify.com
chainonlineverify.com
Screenshot of cometpresale.xyz
cometpresale.xyz
6 VTActiveBinance
Screenshot of cometpresale.xyz
cometpresale.xyz
crownsaves.net
6 VTActive
« Prev 2 3 4 5 6 7 8 Next » Page 5 of 12

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,687 Cloudflare 21,448 Dynadot 10,748 PDR Ltd. d/b/a PublicDomainRe... 7,987 Namecheap 7,704 GoDaddy 6,621 Gname.com Pte. Ltd. 6,495 NameSilo 6,452 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,189 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,376 GitHub, Inc. 2,720 Vercel 2,710 MarkMonitor 2,582 Dominet (HK) Limited 2,175 Spaceship, Inc. 2,115 OwnRegistrar, Inc. 2,006 Netlify 1,875 Hosting Concepts B.V. d/b/a R... 1,720 Cloudflare Pages 1,696 Name.com 1,650 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,436 Key-Systems 1,403 REGRU-RU 1,382 Squarespace Domains II 1,274

Showing 1,128 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,732 genericcrypto 7,713 across 6,799 Google 6,336 Coinbase 4,195 MetaMask 3,715 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,480 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,565 Apple 1,541 x.com 1,439 base 1,426 Bet365 1,306 Microsoft 1,304

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,023 Seed Phrase Theft 19 Airdrop Scam 8,273 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust