Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,368
Total Tracked
193,368
VT Detected
85,940
Last Seen Active
108,916
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,129
Phishing Domains
691
Still Alive
438
Taken Down
98.5%
Detection Rate
7.4
Avg VT Score
61.2%
Alive Rate
1,129 phishing-domain abuse reports sent: Ultahost, Inc.
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,129 domains registered through Ultahost, Inc., so the primary report total is 1,129. Database coverage starts Jul 23, 2025. 61% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 792 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 22, 2026
Ultahost, Inc. 1,129 domains
Screenshot of 345221-gemini.com
345221-gemini.com
5 VTActiveGemini
Screenshot of 345221-gemini.com
345221-gemini.com
72351coinbase.com
5 VTUnknownCoinbase
a-r-d-i-c.site
5 VTActive
aave-v3swap.com
5 VTActiveAave
account.websecqfs-system.com
5 VTActive
Screenshot of acozinhadepedra.online
acozinhadepedra.online
5 VTActive
Screenshot of acozinhadepedra.online
acozinhadepedra.online
Screenshot of adrasteafi.com
adrasteafi.com
5 VTActive
Screenshot of adrasteafi.com
adrasteafi.com
Screenshot of aerodromeauthorization.com
aerodromeauthorization.com
5 VTActiveaerodrome
Screenshot of aerodromeauthorization.com
aerodromeauthorization.com
Screenshot of aerodromeslipstream.xyz
aerodromeslipstream.xyz
5 VTTaken Downaave
Screenshot of aerodromeslipstream.xyz
aerodromeslipstream.xyz
Screenshot of aethersignalworks.com
aethersignalworks.com
5 VTActiveacross
Screenshot of aethersignalworks.com
aethersignalworks.com
Screenshot of aevitasbk.com
aevitasbk.com
5 VTActive
Screenshot of aevitasbk.com
aevitasbk.com
Screenshot of aimirrortrading.com
aimirrortrading.com
5 VTActive
Screenshot of aimirrortrading.com
aimirrortrading.com
Screenshot of amberdatacove.com
amberdatacove.com
5 VTActive
Screenshot of amberdatacove.com
amberdatacove.com
aramcointernational-supplier.com
5 VTActive
Screenshot of arvenolix.com
arvenolix.com
5 VTActive
Screenshot of arvenolix.com
arvenolix.com
Screenshot of arzpluse.com
arzpluse.com
5 VTActivebinance
Screenshot of arzpluse.com
arzpluse.com
Screenshot of assetinvestbrokers.com
assetinvestbrokers.com
5 VTUnknownbase
Screenshot of assetinvestbrokers.com
assetinvestbrokers.com
Screenshot of assetrecovery-solutions.com
assetrecovery-solutions.com
5 VTUnknown
Screenshot of assetrecovery-solutions.com
assetrecovery-solutions.com
Screenshot of aurumquant.net
aurumquant.net
5 VTActivebinance
Screenshot of aurumquant.net
aurumquant.net
Screenshot of aurumtrustglobal.com
aurumtrustglobal.com
5 VTActiveacross
Screenshot of aurumtrustglobal.com
aurumtrustglobal.com
Screenshot of authenticatenodeuser.com
authenticatenodeuser.com
5 VTUnknownAngel Drainermetamask
Screenshot of authenticatenodeuser.com
authenticatenodeuser.com
Screenshot of binance.consumerhelpline.net
binance.consumerhelpline.net
5 VTUnknownBinance
Screenshot of binance.consumerhelpline.net
binance.consumerhelpline.net
Screenshot of birlesikkredidanismanlik.com
birlesikkredidanismanlik.com
5 VTActive["facebook"]
Screenshot of birlesikkredidanismanlik.com
birlesikkredidanismanlik.com
Screenshot of bitminelabpro.com
bitminelabpro.com
5 VTActive["ethereum"]
Screenshot of bitminelabpro.com
bitminelabpro.com
Screenshot of bluwhaleaitoken.xyz
bluwhaleaitoken.xyz
5 VTActiveBinance
Screenshot of bluwhaleaitoken.xyz
bluwhaleaitoken.xyz
Screenshot of borcelletb.com
borcelletb.com
5 VTUnknownacross
Screenshot of borcelletb.com
borcelletb.com
Screenshot of bridgefinancelt.com
bridgefinancelt.com
5 VTActive["google"]
Screenshot of bridgefinancelt.com
bridgefinancelt.com
Screenshot of calverantis.com
calverantis.com
5 VTActive
Screenshot of calverantis.com
calverantis.com
Screenshot of canyonsignalworks.com
canyonsignalworks.com
5 VTActiveacross
Screenshot of canyonsignalworks.com
canyonsignalworks.com
Screenshot of cedarbeaconforge.com
cedarbeaconforge.com
5 VTActiveacross
Screenshot of cedarbeaconforge.com
cedarbeaconforge.com
Screenshot of cedarkernelworks.com
cedarkernelworks.com
5 VTActiveacross
Screenshot of cedarkernelworks.com
cedarkernelworks.com
Screenshot of cedarrelayforge.com
cedarrelayforge.com
5 VTActiveacross
Screenshot of cedarrelayforge.com
cedarrelayforge.com
Screenshot of cedarvectorlabs.com
cedarvectorlabs.com
5 VTActiveacross
Screenshot of cedarvectorlabs.com
cedarvectorlabs.com
Screenshot of cencaptcha.com
cencaptcha.com
5 VTActive
Screenshot of cencaptcha.com
cencaptcha.com
Screenshot of chainnodez.com
chainnodez.com
5 VTUnknownSolana Drainerbinance
Screenshot of chainnodez.com
chainnodez.com
Screenshot of choicefinit.com
choicefinit.com
5 VTUnknowngenericbanking
Screenshot of choicefinit.com
choicefinit.com
Screenshot of cipherixpeak.com
cipherixpeak.com
5 VTActivebalancer
Screenshot of cipherixpeak.com
cipherixpeak.com
Screenshot of cloviluxedeal.com
cloviluxedeal.com
5 VTActive["orca"]
Screenshot of cloviluxedeal.com
cloviluxedeal.com
Screenshot of cobaltmetric.com
cobaltmetric.com
5 VTActiveceler
Screenshot of cobaltmetric.com
cobaltmetric.com
Screenshot of coinaids.com
coinaids.com
5 VTActive
Screenshot of coinaids.com
coinaids.com
Screenshot of coinaxie.com
coinaxie.com
5 VTActiveAxie
Screenshot of coinaxie.com
coinaxie.com
coins-mixer.com
5 VTUnknown
Screenshot of commonairdrop.xyz
commonairdrop.xyz
5 VTUnknownacross
Screenshot of commonairdrop.xyz
commonairdrop.xyz
Screenshot of corephrasehub.com
corephrasehub.com
5 VTActiveacross
Screenshot of corephrasehub.com
corephrasehub.com
Screenshot of crystonetrading.com
crystonetrading.com
5 VTActive
Screenshot of crystonetrading.com
crystonetrading.com
Screenshot of cysicpresale.xyz
cysicpresale.xyz
5 VTActiveacross
Screenshot of cysicpresale.xyz
cysicpresale.xyz
Screenshot of d3airdrop.xyz
d3airdrop.xyz
5 VTActiveceler
Screenshot of d3airdrop.xyz
d3airdrop.xyz
Screenshot of devsdesignlabs.com
devsdesignlabs.com
5 VTActiveacross
Screenshot of devsdesignlabs.com
devsdesignlabs.com
Screenshot of di-elen.com
di-elen.com
5 VTActive
Screenshot of di-elen.com
di-elen.com
Screenshot of draftario.com
draftario.com
5 VTActive
Screenshot of draftario.com
draftario.com
Screenshot of eliteglobal.trade
eliteglobal.trade
5 VTActiveacross
Screenshot of eliteglobal.trade
eliteglobal.trade
Screenshot of ensoairdrop.xyz
ensoairdrop.xyz
5 VTUnknown
Screenshot of ensoairdrop.xyz
ensoairdrop.xyz
equity-edge.org
5 VTActive
Screenshot of ethereumstatus.com
ethereumstatus.com
5 VTUnknownEthereum
Screenshot of ethereumstatus.com
ethereumstatus.com
Screenshot of exabitsairdrop.xyz
exabitsairdrop.xyz
5 VTActivebase
Screenshot of exabitsairdrop.xyz
exabitsairdrop.xyz
Screenshot of fedxrate.com
fedxrate.com
5 VTActive
Screenshot of fedxrate.com
fedxrate.com
Screenshot of flintanchorlabs.com
flintanchorlabs.com
5 VTActiveacross
Screenshot of flintanchorlabs.com
flintanchorlabs.com
flopy-mm.com
5 VTActive
Screenshot of flrespkconnect.com
flrespkconnect.com
5 VTActivecrypto.com
Screenshot of flrespkconnect.com
flrespkconnect.com
Screenshot of forgekernellabs.com
forgekernellabs.com
5 VTActive
Screenshot of forgekernellabs.com
forgekernellabs.com
Screenshot of formexora.com
formexora.com
5 VTActive
Screenshot of formexora.com
formexora.com
Screenshot of fortiscapital-limited.com
fortiscapital-limited.com
5 VTActiveInvestment Scam
Screenshot of fortiscapital-limited.com
fortiscapital-limited.com
Screenshot of frostbyteharbor.com
frostbyteharbor.com
5 VTActive
Screenshot of frostbyteharbor.com
frostbyteharbor.com
Screenshot of ftreeinvestment.com
ftreeinvestment.com
5 VTActive
Screenshot of ftreeinvestment.com
ftreeinvestment.com
genovatedocs.com
5 VTActive
Screenshot of glacieranchorworks.com
glacieranchorworks.com
5 VTActive
Screenshot of glacieranchorworks.com
glacieranchorworks.com
Screenshot of glaciervectorforge.com
glaciervectorforge.com
5 VTActiveacross
Screenshot of glaciervectorforge.com
glaciervectorforge.com
Screenshot of globalvaultdiscoveries.com
globalvaultdiscoveries.com
5 VTUnknown["across"]
Screenshot of globalvaultdiscoveries.com
globalvaultdiscoveries.com
Screenshot of gotoadvertising.net
gotoadvertising.net
5 VTActive
Screenshot of gotoadvertising.net
gotoadvertising.net
Screenshot of granitepulsecore.com
granitepulsecore.com
5 VTActiveacross
Screenshot of granitepulsecore.com
granitepulsecore.com
Screenshot of granitevectorforge.com
granitevectorforge.com
5 VTActiveacross
Screenshot of granitevectorforge.com
granitevectorforge.com
gro31q-cointelegraph.com
5 VTActive
gro31q.com
5 VTActive
gro58e-cointelegraph.com
5 VTUnknowncointelegraph
gro79a.com
5 VTActive
Screenshot of grok37k-cointelegraph.com
grok37k-cointelegraph.com
5 VTActive
Screenshot of grok37k-cointelegraph.com
grok37k-cointelegraph.com
grok46k.net
5 VTActive
grok82c-fxempire.com
5 VTActive
Screenshot of grok87k-cointelegraph.com
grok87k-cointelegraph.com
5 VTActive
Screenshot of grok87k-cointelegraph.com
grok87k-cointelegraph.com
growthcorpinvestments.com
5 VTActive
Screenshot of gtetoken.xyz
gtetoken.xyz
5 VTActivebnb chain
Screenshot of gtetoken.xyz
gtetoken.xyz
Screenshot of halal-profithub.com
halal-profithub.com
5 VTUnknownacross
Screenshot of halal-profithub.com
halal-profithub.com
Screenshot of harborquantix.com
harborquantix.com
5 VTActiveacross
Screenshot of harborquantix.com
harborquantix.com
Screenshot of hedgeinv.com
hedgeinv.com
5 VTActiveacross
Screenshot of hedgeinv.com
hedgeinv.com
Screenshot of hoodflip.xyz
hoodflip.xyz
5 VTActiveRobinhood
Screenshot of hoodflip.xyz
hoodflip.xyz
Screenshot of hopecharityorg.com
hopecharityorg.com
5 VTActiveamazon
Screenshot of hopecharityorg.com
hopecharityorg.com
Screenshot of hyperfoundation-secure.com
hyperfoundation-secure.com
5 VTActive
Screenshot of hyperfoundation-secure.com
hyperfoundation-secure.com
Screenshot of hyperlend.online
hyperlend.online
5 VTUnknown
Screenshot of hyperlend.online
hyperlend.online
hyperliquidaccounthelp.com
5 VTActiveHyperliquid
Screenshot of hyperliquidusersupport.net
hyperliquidusersupport.net
5 VTActiveHyperliquid
Screenshot of hyperliquidusersupport.net
hyperliquidusersupport.net
idapp.spinprz.online
5 VTActive
Screenshot of ikaairdrop.xyz
ikaairdrop.xyz
5 VTUnknownacross
Screenshot of ikaairdrop.xyz
ikaairdrop.xyz
Screenshot of iptvnordicno.com
iptvnordicno.com
5 VTActiveapple
Screenshot of iptvnordicno.com
iptvnordicno.com
Screenshot of irysairdrop.xyz
irysairdrop.xyz
5 VTUnknown
Screenshot of irysairdrop.xyz
irysairdrop.xyz
Screenshot of kernovax.com
kernovax.com
5 VTActiveacross
Screenshot of kernovax.com
kernovax.com
Screenshot of kg.aliexpressboost.com
kg.aliexpressboost.com
5 VTActive
Screenshot of kg.aliexpressboost.com
kg.aliexpressboost.com
ledgersave.com
5 VTActiveLedger
Screenshot of licensefetcher.com
licensefetcher.com
5 VTActive
Screenshot of licensefetcher.com
licensefetcher.com
liegepool.com
5 VTActive
limitlessairdrop.xyz
5 VTUnknownEthereum
« Prev 4 5 6 7 8 9 10 Next » Page 7 of 12

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,689 Cloudflare 21,454 Dynadot 10,752 PDR Ltd. d/b/a PublicDomainRe... 7,988 Namecheap 7,713 GoDaddy 6,622 Gname.com Pte. Ltd. 6,496 NameSilo 6,453 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,190 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,377 GitHub, Inc. 2,721 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,180 Spaceship, Inc. 2,115 OwnRegistrar, Inc. 2,006 Netlify 1,896 Hosting Concepts B.V. d/b/a R... 1,721 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,437 Key-Systems 1,403 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 1,129 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,733 genericcrypto 7,713 across 6,799 Google 6,338 Coinbase 4,195 MetaMask 3,726 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,481 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,566 Apple 1,541 x.com 1,439 base 1,426 Microsoft 1,309 Bet365 1,306

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,023 Seed Phrase Theft 19 Airdrop Scam 8,273 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust