Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,017
Total Tracked
193,017
VT Detected
86,381
Last Seen Active
107,986
Unavailable at Last Check
0
VT Pending
Ultahost, Inc.

Ultahost, Inc.

1,128
Phishing Domains
692
Still Alive
436
Taken Down
98.5%
Detection Rate
7.4
Avg VT Score
61.3%
Alive Rate
1,128 phishing-domain abuse reports sent: Ultahost, Inc.
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,128 domains registered through Ultahost, Inc., so the primary report total is 1,128. Database coverage starts Jul 23, 2025. 61% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 791 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 20, 2026
Ultahost, Inc. 1,128 domains
Screenshot of txrelay.org
txrelay.org
22 VTTaken Downacross
Screenshot of txrelay.org
txrelay.org
Screenshot of requirements-approved-renewal.xyz
requirements-approved-renewal.xyz
21 VTTaken Downfacebook
Screenshot of requirements-approved-renewal.xyz
requirements-approved-renewal.xyz
coinmarketcaa.com
20 VTActive
Screenshot of gameplayablecoin.xyz
gameplayablecoin.xyz
20 VTUnknownbase
Screenshot of gameplayablecoin.xyz
gameplayablecoin.xyz
Screenshot of petettjhdu64jdshfudjhcadsmdnc.com
petettjhdu64jdshfudjhcadsmdnc.com
20 VTUnknown
Screenshot of petettjhdu64jdshfudjhcadsmdnc.com
petettjhdu64jdshfudjhcadsmdnc.com
Screenshot of safeurl-leedger.com
safeurl-leedger.com
20 VTActiveLedger
Screenshot of safeurl-leedger.com
safeurl-leedger.com
Screenshot of coinbasepromotionclaims.com
coinbasepromotionclaims.com
19 VTUnknowncoinbase
Screenshot of coinbasepromotionclaims.com
coinbasepromotionclaims.com
Screenshot of qobsoewffoqiq11i.com
qobsoewffoqiq11i.com
19 VTTaken Down
Screenshot of qobsoewffoqiq11i.com
qobsoewffoqiq11i.com
Screenshot of stakesone.site
stakesone.site
19 VTActivecryptoscam
Screenshot of stakesone.site
stakesone.site
Screenshot of ubsnovus.com
ubsnovus.com
19 VTActivegenericbanking
Screenshot of ubsnovus.com
ubsnovus.com
Screenshot of ultrexcapitalfx.com
ultrexcapitalfx.com
19 VTActive
Screenshot of ultrexcapitalfx.com
ultrexcapitalfx.com
www.ledger-bank.com
19 VTTaken DownLedger
Screenshot of 13122q34rf4534tg456tg5655fwesfsd3432412342454.com
13122q34rf4534tg456tg5655fwesfsd3432412342454.com
18 VTUnknown
Screenshot of 13122q34rf4534tg456tg5655fwesfsd3432412342454.com
13122q34rf4534tg456tg5655fwesfsd3432412342454.com
Screenshot of 24robinhoodtradingoption.com
24robinhoodtradingoption.com
18 VTUnknownRobinhood
Screenshot of 24robinhoodtradingoption.com
24robinhoodtradingoption.com
Screenshot of bnbtrustverify.com
bnbtrustverify.com
18 VTActive
Screenshot of bnbtrustverify.com
bnbtrustverify.com
Screenshot of coinapibase.appletteron2fa.xyz
coinapibase.appletteron2fa.xyz
18 VTUnknownApple
Screenshot of coinapibase.appletteron2fa.xyz
coinapibase.appletteron2fa.xyz
Screenshot of eamaar-properties.com
eamaar-properties.com
18 VTActive
Screenshot of eamaar-properties.com
eamaar-properties.com
Screenshot of grok46k-cointelegraph.com
grok46k-cointelegraph.com
18 VTActivecointelegraph
Screenshot of grok46k-cointelegraph.com
grok46k-cointelegraph.com
Screenshot of jupsplash.com
jupsplash.com
18 VTUnknown
Screenshot of jupsplash.com
jupsplash.com
Screenshot of mail.coinmarketcaa.com
mail.coinmarketcaa.com
18 VTActiveEigenLayer
Screenshot of mail.coinmarketcaa.com
mail.coinmarketcaa.com
Screenshot of primeskywing.com
primeskywing.com
18 VTActive
Screenshot of primeskywing.com
primeskywing.com
Screenshot of tki-bsvrlr.xyz
tki-bsvrlr.xyz
18 VTTaken DownTurkish Government
Screenshot of tki-bsvrlr.xyz
tki-bsvrlr.xyz
Screenshot of tokenpowket.com
tokenpowket.com
18 VTTaken Downbinance
Screenshot of tokenpowket.com
tokenpowket.com
walpromo.store
18 VTActiveWalmart
Screenshot of active.network-panel-zone.com
active.network-panel-zone.com
17 VTTaken Downfacebook
Screenshot of active.network-panel-zone.com
active.network-panel-zone.com
Screenshot of blofinshub.com
blofinshub.com
17 VTActive
Screenshot of blofinshub.com
blofinshub.com
Screenshot of exoduuss.online
exoduuss.online
17 VTActiveExodus
Screenshot of exoduuss.online
exoduuss.online
Screenshot of fidstan.com
fidstan.com
17 VTTaken Downfacebook
Screenshot of fidstan.com
fidstan.com
grok82c-cointelegraph.com
17 VTActive
Screenshot of luck-gift.com
luck-gift.com
17 VTActive
Screenshot of luck-gift.com
luck-gift.com
Screenshot of meta-compliance.com
meta-compliance.com
17 VTActiveMetaMask
Screenshot of meta-compliance.com
meta-compliance.com
Screenshot of mrtkiralama.com
mrtkiralama.com
17 VTActive
Screenshot of mrtkiralama.com
mrtkiralama.com
Screenshot of phantomsecure.net
phantomsecure.net
17 VTUnknownSolana Drainerphantom
Screenshot of phantomsecure.net
phantomsecure.net
Screenshot of www-roblolx.com
www-roblolx.com
17 VTTaken Down
Screenshot of www-roblolx.com
www-roblolx.com
Screenshot of based-investment.com
based-investment.com
16 VTActiveCoinbase
Screenshot of based-investment.com
based-investment.com
Screenshot of copytrade-signalfx.net
copytrade-signalfx.net
16 VTActivegenericscam
Screenshot of copytrade-signalfx.net
copytrade-signalfx.net
Screenshot of creditvaultonline.com
creditvaultonline.com
16 VTActive
Screenshot of creditvaultonline.com
creditvaultonline.com
cryptocoastinvestmentsltd.com
16 VTActive
Screenshot of firstmidwestsbank.com
firstmidwestsbank.com
16 VTUnknown["foundation"]
Screenshot of firstmidwestsbank.com
firstmidwestsbank.com
Screenshot of fnbux.com
fnbux.com
16 VTActiveroblox
Screenshot of fnbux.com
fnbux.com
Screenshot of fortbitcapital.com
fortbitcapital.com
16 VTActivegenericscam
Screenshot of fortbitcapital.com
fortbitcapital.com
grok82c-cryptoslate.com
16 VTActivecryptoslate
Screenshot of ledger-apparaat.com
ledger-apparaat.com
16 VTUnknownEthereum
Screenshot of ledger-apparaat.com
ledger-apparaat.com
Screenshot of mail.payment-usdc-erc20.com
mail.payment-usdc-erc20.com
16 VTUnknownTrustWallet
Screenshot of mail.payment-usdc-erc20.com
mail.payment-usdc-erc20.com
Screenshot of meritking1460.com
meritking1460.com
16 VTActivetelegram
Screenshot of meritking1460.com
meritking1460.com
Screenshot of metamaskusdt.com
metamaskusdt.com
16 VTUnknownMetaMask
Screenshot of metamaskusdt.com
metamaskusdt.com
Screenshot of mrtcarrs.com
mrtcarrs.com
16 VTActive
Screenshot of mrtcarrs.com
mrtcarrs.com
mytrustwallets.com
16 VTUnknownTrust Wallet
Screenshot of nodeverifyuser.net
nodeverifyuser.net
16 VTUnknownWalletConnect
Screenshot of nodeverifyuser.net
nodeverifyuser.net
Screenshot of oakridgemutualbk.online
oakridgemutualbk.online
16 VTActivegenericbanking
Screenshot of oakridgemutualbk.online
oakridgemutualbk.online
Screenshot of payment-usdc-erc20.com
payment-usdc-erc20.com
16 VTUnknownTrustWallet
Screenshot of payment-usdc-erc20.com
payment-usdc-erc20.com
Screenshot of rbxuser.com
rbxuser.com
16 VTActiveroblox
Screenshot of rbxuser.com
rbxuser.com
Screenshot of rtbbbb.com
rtbbbb.com
16 VTActive
Screenshot of rtbbbb.com
rtbbbb.com
Screenshot of safeurl-firmware.com
safeurl-firmware.com
16 VTActiveLedger
Screenshot of safeurl-firmware.com
safeurl-firmware.com
Screenshot of truvestapay.com
truvestapay.com
16 VTActive
Screenshot of truvestapay.com
truvestapay.com
Screenshot of ventmainsycfix.org
ventmainsycfix.org
16 VTActivegenericcrypto
Screenshot of ventmainsycfix.org
ventmainsycfix.org
Screenshot of alphasignalengine.com
alphasignalengine.com
15 VTActive
Screenshot of alphasignalengine.com
alphasignalengine.com
Screenshot of arciumairdrop.xyz
arciumairdrop.xyz
15 VTTaken Down
Screenshot of arciumairdrop.xyz
arciumairdrop.xyz
Screenshot of blockchain-payments.com
blockchain-payments.com
15 VTActiveBlockchain.com
Screenshot of blockchain-payments.com
blockchain-payments.com
Screenshot of cantonnetwork.xyz
cantonnetwork.xyz
15 VTActiveManta
Screenshot of cantonnetwork.xyz
cantonnetwork.xyz
canwalet.com
15 VTActive
Screenshot of chains-nodex.com
chains-nodex.com
15 VTUnknownacross
Screenshot of chains-nodex.com
chains-nodex.com
Screenshot of claimv3.com
claimv3.com
15 VTActiveUniswap
Screenshot of claimv3.com
claimv3.com
Screenshot of clearhavenb.com
clearhavenb.com
15 VTActive
Screenshot of clearhavenb.com
clearhavenb.com
Screenshot of connectflrlines.com
connectflrlines.com
15 VTUnknownblast
Screenshot of connectflrlines.com
connectflrlines.com
Screenshot of crypto-ai-terminal.online
crypto-ai-terminal.online
15 VTUnknownbinance
Screenshot of crypto-ai-terminal.online
crypto-ai-terminal.online
Screenshot of cryptocoral-invest.com
cryptocoral-invest.com
15 VTUnknown
Screenshot of cryptocoral-invest.com
cryptocoral-invest.com
Screenshot of cyberfortsystems.com
cyberfortsystems.com
15 VTActive
Screenshot of cyberfortsystems.com
cyberfortsystems.com
doubledoorcapital.com
15 VTActiveOrca
Screenshot of elontrade-firm.com
elontrade-firm.com
15 VTActive
Screenshot of elontrade-firm.com
elontrade-firm.com
finance-moonpay.com
15 VTActive
Screenshot of finexmobile.com
finexmobile.com
15 VTUnknowngenericbanking
Screenshot of finexmobile.com
finexmobile.com
Screenshot of foxminingwayoption.com
foxminingwayoption.com
15 VTActive
Screenshot of foxminingwayoption.com
foxminingwayoption.com
Screenshot of fundpricelow.xyz
fundpricelow.xyz
15 VTUnknownethereum
Screenshot of fundpricelow.xyz
fundpricelow.xyz
Screenshot of hiltonspring.com
hiltonspring.com
15 VTUnknowngenericbanking
Screenshot of hiltonspring.com
hiltonspring.com
Screenshot of jandhanyojna.org
jandhanyojna.org
15 VTActive
Screenshot of jandhanyojna.org
jandhanyojna.org
Screenshot of masdatadeptgovsg.com
masdatadeptgovsg.com
15 VTActive
Screenshot of masdatadeptgovsg.com
masdatadeptgovsg.com
Screenshot of maxdeptgov.com
maxdeptgov.com
15 VTActive
Screenshot of maxdeptgov.com
maxdeptgov.com
Screenshot of metrixcorehubs.com
metrixcorehubs.com
15 VTActive
Screenshot of metrixcorehubs.com
metrixcorehubs.com
Screenshot of onlineallianceinterna.org
onlineallianceinterna.org
15 VTActiveLinea
Screenshot of onlineallianceinterna.org
onlineallianceinterna.org
Screenshot of primebussiness.com
primebussiness.com
15 VTUnknown["venus"]
Screenshot of primebussiness.com
primebussiness.com
Screenshot of provex-app.com
provex-app.com
15 VTUnknowngenericcrypto
Screenshot of provex-app.com
provex-app.com
Screenshot of smartchainweb.com
smartchainweb.com
15 VTTaken Downcoinbase
Screenshot of smartchainweb.com
smartchainweb.com
Screenshot of stantexcapital.com
stantexcapital.com
15 VTActive
Screenshot of stantexcapital.com
stantexcapital.com
Screenshot of togewatch.com
togewatch.com
15 VTActive
Screenshot of togewatch.com
togewatch.com
Screenshot of tracefortress.com
tracefortress.com
15 VTActive
Screenshot of tracefortress.com
tracefortress.com
Screenshot of trustclimbholdings.com
trustclimbholdings.com
15 VTActivegenericscam
Screenshot of trustclimbholdings.com
trustclimbholdings.com
Screenshot of vaultorox.com
vaultorox.com
15 VTActivegenericscam
Screenshot of vaultorox.com
vaultorox.com
Screenshot of veltraxbank.com
veltraxbank.com
15 VTActivegenericbanking
Screenshot of veltraxbank.com
veltraxbank.com
Screenshot of walletdrainer.site
walletdrainer.site
15 VTTaken DownGoogle
Screenshot of walletdrainer.site
walletdrainer.site
Screenshot of worldlibertyfinance-unlock.xyz
worldlibertyfinance-unlock.xyz
15 VTTaken Down
Screenshot of worldlibertyfinance-unlock.xyz
worldlibertyfinance-unlock.xyz
apexcopy-ai.com
14 VTActivegenericscam
Screenshot of apexcoremarkets.com
apexcoremarkets.com
14 VTActive
Screenshot of apexcoremarkets.com
apexcoremarkets.com
aramcointernational-suppliers.com
14 VTActive
Screenshot of att-bet.com
att-bet.com
14 VTActive
Screenshot of att-bet.com
att-bet.com
Screenshot of barclays.secure-forward.com
barclays.secure-forward.com
14 VTActivebarclays
Screenshot of barclays.secure-forward.com
barclays.secure-forward.com
Screenshot of bit-ulterinvest.xyz
bit-ulterinvest.xyz
14 VTActivecryptoscam
Screenshot of bit-ulterinvest.xyz
bit-ulterinvest.xyz
Screenshot of blocktrustmarkets.com
blocktrustmarkets.com
14 VTActivegenericscam
Screenshot of blocktrustmarkets.com
blocktrustmarkets.com
Screenshot of blossombusinessbk.com
blossombusinessbk.com
14 VTActive
Screenshot of blossombusinessbk.com
blossombusinessbk.com
Screenshot of bluecrest.developerplug.com
bluecrest.developerplug.com
14 VTActive
Screenshot of bluecrest.developerplug.com
bluecrest.developerplug.com
1 2 3 4 Next » Page 1 of 12

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,673 Cloudflare 21,443 Dynadot 10,740 PDR Ltd. d/b/a PublicDomainRe... 7,983 Namecheap 7,700 GoDaddy 6,613 Gname.com Pte. Ltd. 6,494 NameSilo 6,449 WebNIC 5,123 Global Domain Group 4,255 Tucows 4,187 Trustname.com 4,164 Wix Studio 4,093 Hostinger 3,374 GitHub, Inc. 2,709 Vercel 2,687 MarkMonitor 2,580 Dominet (HK) Limited 2,172 Spaceship, Inc. 2,113 OwnRegistrar, Inc. 2,006 Netlify 1,830 Hosting Concepts B.V. d/b/a R... 1,719 Cloudflare Pages 1,664 Name.com 1,650 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,432 Key-Systems 1,402 REGRU-RU 1,382 Squarespace Domains II 1,267

Showing 1,128 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,659 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,730 genericcrypto 7,712 across 6,799 Google 6,336 Coinbase 4,183 MetaMask 3,713 Trezor 3,405 Solana 3,000 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,475 Facebook 2,227 cryptoscam 1,804 Apple 1,541 Cloudflare 1,540 x.com 1,439 base 1,426 Bet365 1,305 Microsoft 1,299

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,022 Seed Phrase Theft 19 Airdrop Scam 8,271 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust