ultraventura[.]com

Analysis of ultraventura.com shows a recent infrastructure tied to a brand‑impersonation campaign. The domain was registered on February 21, 2026 through Wild West Domains, LLC and resolves to IP address 149.255.58.154, which belongs to AS34931 Awareness Software Limited located in Great Britain. The hosting stack is identified as Nginx with OpenResty, and the site presents the page title "Account Suspended". SSL is provided by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, confirming a valid TLS certificate despite the low reputation of the host.

Gridinsoft assigns a trust score of 0 out of 100, indicating extreme suspicion. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as taken offline. VirusTotal scans report that eight of ninety‑three security vendors flagged the domain, reinforcing the malicious assessment. Nameservers ns39.domaincontrol.com and ns40.domaincontrol.com are typical of GoDaddy’s default configuration, offering no additional obscurity.

No safe‑browsing, OTX, or additional blocklist references were observed in the current intelligence set. Defenders should add ultraventura.com to local block and allow lists, monitor DNS queries for the associated IP and nameservers, and ensure that any traffic to the domain is denied at the perimeter. Given the recent creation date and the presence of a valid certificate, automated detection systems may miss the domain without explicit reputation feeds; therefore, threat‑intel feeds that include the eight VirusTotal detections and the PhishDestroy block should be integrated. Continuous re‑evaluation is advised, as the offline status may change if the operators reactivate the site.