Bluehost: phishing domains and abuse response

PhishDestroy reported 26 phishing domains registered with Bluehost between 2026-01-02 and 2026-06-18, sending 26 abuse reports. Median time from the first report until a domain stopped resolving: 21.3 days (n = 10). 6 of 16 domains were still active 90 days after the first report. The database holds 51 Bluehost domains in total.

26
Domains reported (window)
26
Abuse reports sent
21.3 days
Median time to unavailable
51
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 16 (62%); Offline 9 (35%); Suspended 1 (4%).

90th percentile time to unavailable: 42.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. ["wordpress"]4
  2. Coinbase2
  3. Outlook Web Access1
  4. Docusign1
  5. Google1
  6. Yahoo1
  7. Celer1
  8. Outlook1

Top-level domains

  1. .com38
  2. .br6
  3. .me3
  4. .org2
  5. .net2

Most reported domains

  1. alexgalho.com.br
  2. aml-review.info.bb24-c.info
  3. apps.wisertecnologia.com.br
  4. clecioautosocorro.com.br
  5. clinicaespacosaude.med.br

Latest Bluehost phishing domains

The 30 most recently detected domains at Bluehost
DomainFirst detectedStatus at last checkRegistrar
oxwitik.com2026-10-20OnlineBluehost
cuisineontheroadspr.com2026-10-14OnlineBluehost
emtelakproperties.com2026-10-11OnlineBluehost
scottjdecker.com2026-09-27OnlineBluehost
timeforgoldens.com2026-09-21OnlineBluehost
gicarealestate.com2026-09-21OnlineBluehost
spriteinvest.com2026-09-17OfflineBluehost
sphereofculture.zovera.com2026-09-17OnlineBluehost
dcgeeks.net2026-09-08OnlineBluehost
eachinese.com2026-09-04OnlineBluehost
wenaxe.com2026-09-04OnlineBluehost
quicksepticservice.com2026-09-03OnlineBluehost
alexander-tech.org2026-08-18OfflineBluehost
famaviajescr.com2026-08-06OnlineBluehost
greenscapes.beetek.net2026-07-27OnlineBluehost
mikelmak.com2026-07-18OfflineBluehost
trainwithresurgence.com2026-07-06OfflineBluehost
talcuminjuriesclaim.com2026-06-19OnlineBluehost
weekdaymealprep.com2026-06-16OnlineBluehost
thegmfinancial.com2026-06-16OnlineBluehost
tradeexplore247.com2026-06-15OnlineBluehost
website-aeed0a4e.iza.col.mybluehost.me2026-06-15OnlineBluehost
markatuna.com2026-06-14OfflineBluehost
cooltentregas.com.br2026-06-08OnlineBluehost
prestonbeebe.com2026-05-29Taken downBluehost
autodiscover.whistlingtree3.com2026-04-19OnlineBluehost
happyheartandmind.com2026-04-07OnlineBluehost
porinisafaricamps.com2026-03-06OnlineBluehost
csbgafrica.com2026-02-26Taken downBluehost
80dances.com2026-02-26Taken downBluehost

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.