Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,368
Total Tracked
193,368
VT Detected
85,940
Last Seen Active
108,916
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,129
Phishing Domains
691
Still Alive
438
Taken Down
98.5%
Detection Rate
7.4
Avg VT Score
61.2%
Alive Rate
1,129 phishing-domain abuse reports sent: Ultahost, Inc.
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,129 domains registered through Ultahost, Inc., so the primary report total is 1,129. Database coverage starts Jul 23, 2025. 61% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 792 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 22, 2026
Ultahost, Inc. 1,129 domains
Screenshot of lineraairdrop.xyz
lineraairdrop.xyz
5 VTUnknown
Screenshot of lineraairdrop.xyz
lineraairdrop.xyz
Screenshot of loombyteworks.com
loombyteworks.com
5 VTActive["stripe"]
Screenshot of loombyteworks.com
loombyteworks.com
Screenshot of meadowanchorlabs.com
meadowanchorlabs.com
5 VTActiveacross
Screenshot of meadowanchorlabs.com
meadowanchorlabs.com
Screenshot of metropalmdelivery.com
metropalmdelivery.com
5 VTActive
Screenshot of metropalmdelivery.com
metropalmdelivery.com
Screenshot of neuralaxislab.com
neuralaxislab.com
5 VTActiveacross
Screenshot of neuralaxislab.com
neuralaxislab.com
Screenshot of nexaiglobal.xyz
nexaiglobal.xyz
5 VTTaken Downcoinbase
Screenshot of nexaiglobal.xyz
nexaiglobal.xyz
Screenshot of nextdevstore.com
nextdevstore.com
5 VTActiveacross
Screenshot of nextdevstore.com
nextdevstore.com
Screenshot of nhacaiut.com
nhacaiut.com
5 VTActive
Screenshot of nhacaiut.com
nhacaiut.com
Screenshot of northbridgework.com
northbridgework.com
5 VTActive["across"]
Screenshot of northbridgework.com
northbridgework.com
Screenshot of northforgeworks.com
northforgeworks.com
5 VTActiveacross
Screenshot of northforgeworks.com
northforgeworks.com
Screenshot of novaedge-innovations.com
novaedge-innovations.com
5 VTActiveInvestment Scam
Screenshot of novaedge-innovations.com
novaedge-innovations.com
Screenshot of novastraholding.com
novastraholding.com
5 VTActiveacross
Screenshot of novastraholding.com
novastraholding.com
onchainwrk.com
5 VTActive
Screenshot of orbitalforgelabs.com
orbitalforgelabs.com
5 VTActivescroll
Screenshot of orbitalforgelabs.com
orbitalforgelabs.com
Screenshot of orbitvectorforge.com
orbitvectorforge.com
5 VTActiveacross
Screenshot of orbitvectorforge.com
orbitvectorforge.com
Screenshot of pandaxlabx.com
pandaxlabx.com
5 VTActiveacross
Screenshot of pandaxlabx.com
pandaxlabx.com
papercrafterpro.com
5 VTActive
papyrnova.com
5 VTActive
Screenshot of peakharborforge.com
peakharborforge.com
5 VTActiveacross
Screenshot of peakharborforge.com
peakharborforge.com
Screenshot of pipeairdrop.xyz
pipeairdrop.xyz
5 VTUnknownacross
Screenshot of pipeairdrop.xyz
pipeairdrop.xyz
Screenshot of pngclaimreward.com
pngclaimreward.com
5 VTTaken Downethereum
Screenshot of pngclaimreward.com
pngclaimreward.com
Screenshot of polarrelay.com
polarrelay.com
5 VTActive["stripe"]
Screenshot of polarrelay.com
polarrelay.com
Screenshot of primeindexpro.com
primeindexpro.com
5 VTUnknown["revolut"]
Screenshot of primeindexpro.com
primeindexpro.com
Screenshot of primemarketspro.com
primemarketspro.com
5 VTActiveaave
Screenshot of primemarketspro.com
primemarketspro.com
Screenshot of projectxpresale.xyz
projectxpresale.xyz
5 VTActiveacross
Screenshot of projectxpresale.xyz
projectxpresale.xyz
Screenshot of qfsextremebackupasset.org
qfsextremebackupasset.org
5 VTTaken Downgoogle
Screenshot of qfsextremebackupasset.org
qfsextremebackupasset.org
Screenshot of qfsworldpatriotledger.xyz
qfsworldpatriotledger.xyz
5 VTTaken DownLedger
Screenshot of qfsworldpatriotledger.xyz
qfsworldpatriotledger.xyz
Screenshot of quantaraforgelabs.com
quantaraforgelabs.com
5 VTActivepaypal
Screenshot of quantaraforgelabs.com
quantaraforgelabs.com
Screenshot of quantfils.com
quantfils.com
5 VTActive["across"]
Screenshot of quantfils.com
quantfils.com
Screenshot of quantivoratechnologies.com
quantivoratechnologies.com
5 VTActiveacross
Screenshot of quantivoratechnologies.com
quantivoratechnologies.com
Screenshot of quantumcapitalbk.com
quantumcapitalbk.com
5 VTActivegoogle
Screenshot of quantumcapitalbk.com
quantumcapitalbk.com
Screenshot of quantumledgertradefi.com
quantumledgertradefi.com
5 VTCloaked · LiveLedger
Screenshot of quantumledgertradefi.com
quantumledgertradefi.com
Screenshot of rainbowairdrops.xyz
rainbowairdrops.xyz
5 VTActiverainbow
Screenshot of rainbowairdrops.xyz
rainbowairdrops.xyz
Screenshot of raxitgamdha.com
raxitgamdha.com
5 VTActiveinstagram
Screenshot of raxitgamdha.com
raxitgamdha.com
Screenshot of realestate-vista.com
realestate-vista.com
5 VTActive
Screenshot of realestate-vista.com
realestate-vista.com
Screenshot of ridgebeaconlabs.com
ridgebeaconlabs.com
5 VTActiveacross
Screenshot of ridgebeaconlabs.com
ridgebeaconlabs.com
satoshimusk.com
5 VTUnknown
Screenshot of sharewiseholdings.com
sharewiseholdings.com
5 VTTaken Down
Screenshot of sharewiseholdings.com
sharewiseholdings.com
Screenshot of signaltor.com
signaltor.com
5 VTActiveacross
Screenshot of signaltor.com
signaltor.com
Screenshot of slatevectorworks.com
slatevectorworks.com
5 VTActiveacross
Screenshot of slatevectorworks.com
slatevectorworks.com
Screenshot of solflarewebextension.net
solflarewebextension.net
5 VTTaken DownSolana Drainerceler
Screenshot of solflarewebextension.net
solflarewebextension.net
Screenshot of sonixhub.net
sonixhub.net
5 VTActive
Screenshot of sonixhub.net
sonixhub.net
Screenshot of sonixhub.xyz
sonixhub.xyz
5 VTActiveacross
Screenshot of sonixhub.xyz
sonixhub.xyz
Screenshot of soulsplit.net
soulsplit.net
5 VTTaken Downdiscord
Screenshot of soulsplit.net
soulsplit.net
Screenshot of spkflresconnect.xyz
spkflresconnect.xyz
5 VTActivebinance
Screenshot of spkflresconnect.xyz
spkflresconnect.xyz
springacessshub.com
5 VTActive
Screenshot of spx21k-centurylink.com
spx21k-centurylink.com
5 VTActivebase
Screenshot of spx21k-centurylink.com
spx21k-centurylink.com
Screenshot of spx21k-coinpwire.com
spx21k-coinpwire.com
5 VTActivebnb chain
Screenshot of spx21k-coinpwire.com
spx21k-coinpwire.com
Screenshot of spx49k-cointelegraph.com
spx49k-cointelegraph.com
5 VTUnknown
Screenshot of spx49k-cointelegraph.com
spx49k-cointelegraph.com
Screenshot of spx49k-fxempire.com
spx49k-fxempire.com
5 VTUnknown
Screenshot of spx49k-fxempire.com
spx49k-fxempire.com
Screenshot of spx55k-coinpwire.com
spx55k-coinpwire.com
5 VTUnknownbnb chain
Screenshot of spx55k-coinpwire.com
spx55k-coinpwire.com
Screenshot of spx55k-cointelegraph.com
spx55k-cointelegraph.com
5 VTActiveacross
Screenshot of spx55k-cointelegraph.com
spx55k-cointelegraph.com
Screenshot of spx88k-fxempire.com
spx88k-fxempire.com
5 VTActive
Screenshot of spx88k-fxempire.com
spx88k-fxempire.com
Screenshot of spx88k.org
spx88k.org
5 VTActive
Screenshot of spx88k.org
spx88k.org
Screenshot of spx99x.org
spx99x.org
5 VTActive
Screenshot of spx99x.org
spx99x.org
Screenshot of spxpresale-coinpwire.com
spxpresale-coinpwire.com
5 VTActiveacross
Screenshot of spxpresale-coinpwire.com
spxpresale-coinpwire.com
Screenshot of stoneanchorforge.com
stoneanchorforge.com
5 VTActive["across"]
Screenshot of stoneanchorforge.com
stoneanchorforge.com
Screenshot of stratasnode.com
stratasnode.com
5 VTActiveacross
Screenshot of stratasnode.com
stratasnode.com
Screenshot of summitvectorforge.com
summitvectorforge.com
5 VTActiveacross
Screenshot of summitvectorforge.com
summitvectorforge.com
Screenshot of sushi-swap-eth.xyz
sushi-swap-eth.xyz
5 VTTaken DownSushiSwap
Screenshot of sushi-swap-eth.xyz
sushi-swap-eth.xyz
Screenshot of synapticgridx.com
synapticgridx.com
5 VTActiveacross
Screenshot of synapticgridx.com
synapticgridx.com
Screenshot of syncappfinance.com
syncappfinance.com
5 VTActive
Screenshot of syncappfinance.com
syncappfinance.com
Screenshot of tatsaservicios.com
tatsaservicios.com
5 VTActive
Screenshot of tatsaservicios.com
tatsaservicios.com
techcapitalltd.org
5 VTActive
Screenshot of thegreaterbull.com
thegreaterbull.com
5 VTActiveSolana
Screenshot of thegreaterbull.com
thegreaterbull.com
Screenshot of timbersignallabs.com
timbersignallabs.com
5 VTActiveacross
Screenshot of timbersignallabs.com
timbersignallabs.com
Screenshot of toporbitix.com
toporbitix.com
5 VTActiveacross
Screenshot of toporbitix.com
toporbitix.com
Screenshot of trades-polymarket.com
trades-polymarket.com
5 VTTaken Down["wordpress"]
Screenshot of trades-polymarket.com
trades-polymarket.com
Screenshot of trezorsuitesecurity.com
trezorsuitesecurity.com
5 VTActiveTrezor
Screenshot of trezorsuitesecurity.com
trezorsuitesecurity.com
truoasisfluxx.online
5 VTActive
Screenshot of trustpromo.org
trustpromo.org
5 VTCloaked · LiveGoogle
Screenshot of trustpromo.org
trustpromo.org
uniglobalweb.com
5 VTActive
Screenshot of unitedconcordinvestment.com
unitedconcordinvestment.com
5 VTCloaked · Live
Screenshot of unitedconcordinvestment.com
unitedconcordinvestment.com
Screenshot of unitedfxtradings.com
unitedfxtradings.com
5 VTActive
Screenshot of unitedfxtradings.com
unitedfxtradings.com
Screenshot of usacoinofficial.com
usacoinofficial.com
5 VTTaken Down
Screenshot of usacoinofficial.com
usacoinofficial.com
Screenshot of valekernellabs.com
valekernellabs.com
5 VTActiveacross
Screenshot of valekernellabs.com
valekernellabs.com
Screenshot of valevectorworks.com
valevectorworks.com
5 VTActiveacross
Screenshot of valevectorworks.com
valevectorworks.com
Screenshot of vantixgrid.com
vantixgrid.com
5 VTActivecompound
Screenshot of vantixgrid.com
vantixgrid.com
Screenshot of varmeshrek.com
varmeshrek.com
5 VTActive
Screenshot of varmeshrek.com
varmeshrek.com
Screenshot of vibawallet.com
vibawallet.com
5 VTActiveacross
Screenshot of vibawallet.com
vibawallet.com
Screenshot of voltmarketsfx.com
voltmarketsfx.com
5 VTTaken Downacross
Screenshot of voltmarketsfx.com
voltmarketsfx.com
Screenshot of wagmiehub.com
wagmiehub.com
5 VTCloaked · Live
Screenshot of wagmiehub.com
wagmiehub.com
Screenshot of walletguards.site
walletguards.site
5 VTActive
Screenshot of walletguards.site
walletguards.site
Screenshot of web3userauth.net
web3userauth.net
5 VTActive
Screenshot of web3userauth.net
web3userauth.net
Screenshot of wintradecup.com
wintradecup.com
5 VTActive["across"]
Screenshot of wintradecup.com
wintradecup.com
Screenshot of wisestockfx.online
wisestockfx.online
5 VTActive
Screenshot of wisestockfx.online
wisestockfx.online
Screenshot of worldclascargo.com
worldclascargo.com
5 VTCloaked · Live
Screenshot of worldclascargo.com
worldclascargo.com
Screenshot of www.networkaml.com
www.networkaml.com
5 VTActiveledger
Screenshot of www.networkaml.com
www.networkaml.com
Screenshot of www.trust-amlscore.com
www.trust-amlscore.com
5 VTTaken Down
Screenshot of www.trust-amlscore.com
www.trust-amlscore.com
Screenshot of xn--qh3by6f12g.com
xn--qh3by6f12g.com
5 VTActive
Screenshot of xn--qh3by6f12g.com
xn--qh3by6f12g.com
Screenshot of xtweep.com
xtweep.com
5 VTActive
Screenshot of xtweep.com
xtweep.com
Screenshot of zoommeet03.com
zoommeet03.com
5 VTActiveZoom
Screenshot of zoommeet03.com
zoommeet03.com
Screenshot of aerodromeslipstream.net
aerodromeslipstream.net
4 VTActive
Screenshot of aerodromeslipstream.net
aerodromeslipstream.net
Screenshot of allowancebeefyfinance.com
allowancebeefyfinance.com
4 VTTaken Down["twitter"]
Screenshot of allowancebeefyfinance.com
allowancebeefyfinance.com
alverionis.com
4 VTActive
Screenshot of arkanworkshop.com
arkanworkshop.com
4 VTActive
Screenshot of arkanworkshop.com
arkanworkshop.com
Screenshot of avantispresale.xyz
avantispresale.xyz
4 VTActiveacross
Screenshot of avantispresale.xyz
avantispresale.xyz
Screenshot of baseleycommunity.com
baseleycommunity.com
4 VTActive
Screenshot of baseleycommunity.com
baseleycommunity.com
Screenshot of basisfyle.com
basisfyle.com
4 VTActive
Screenshot of basisfyle.com
basisfyle.com
Screenshot of beagers.com
beagers.com
4 VTUnknown
Screenshot of beagers.com
beagers.com
« Prev 5 6 7 8 9 10 11 Next » Page 8 of 12

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,689 Cloudflare 21,454 Dynadot 10,752 PDR Ltd. d/b/a PublicDomainRe... 7,988 Namecheap 7,713 GoDaddy 6,622 Gname.com Pte. Ltd. 6,496 NameSilo 6,453 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,190 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,377 GitHub, Inc. 2,721 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,180 Spaceship, Inc. 2,115 OwnRegistrar, Inc. 2,006 Netlify 1,896 Hosting Concepts B.V. d/b/a R... 1,721 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,437 Key-Systems 1,403 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 1,129 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,733 genericcrypto 7,713 across 6,799 Google 6,338 Coinbase 4,195 MetaMask 3,726 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,481 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,566 Apple 1,541 x.com 1,439 base 1,426 Microsoft 1,309 Bet365 1,306

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,023 Seed Phrase Theft 19 Airdrop Scam 8,273 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust