Round 4 Investigation: ICANN Breach Within Months, Zero .com Registrations, Third Brother & Military Tech
DomainNameWire reveals UltaHost was breached within months of becoming a registrar — with literally zero .com registrations. A third Doughouz brother identified. The family operates a “military technology” venture. Industry consensus: UltaHost is bulletproof hosting.
1. In ICANN Breach Within Months — Zero .com Registrations
DomainNameWire — Leading Domain Industry Publication
“Ultahost is off to a rocky start with ICANN. One of ICANN's newest domain name registrars is already in breach of its accreditation agreement, just months after signing it... Ultahost signed its accreditation agreement in September [2024] and was assigned IANA#4331. As of the end of October, it had no .com registrations.”
— DomainNameWire, February 5, 2025
Why This Is Devastating
- ●UltaHost signed their registrar agreement in September 2024
- ●Within roughly four months, ICANN issued a Notice of Breach
- ●They had literally zero legitimate .com registrations when already failing abuse compliance
- ●Their entire registrar business was structured around abuse-friendly customers from day one
This isn't “growing pains” — this is a registrar that existed to enable bad actors.
Source: domainnamewire.com
2. UltaHost's Own Terms Confirm Multi-Jurisdictional Shell Structure
“the General Agreement of UltaHost, encompassing terms, conditions, and policies for its sites, products, and services, is hereby extended to include its operations across various regions. This includes UltaHost Dubai, UltaHost Istanbul, UltaHost Ltd UK, and UltaHost Inc USA.”
— UltaHost Terms of Service (ultahost.com/terms)
UltaHost officially admits to running four separate jurisdictional entities. Combined with the UK Companies House filing showing ULTAHOST LTD UK is a £10,000 one-person Turkish shell, and the Delaware “registered agent” address, this confirms what the HostScore lawsuit reviewer alleged: jurisdictional shell-company structure designed to make consumers and law enforcement chase paper across four countries.
Source: ultahost.com/terms
3. Third Doughouz Brother Identified — Family Operates “Military Technology”
Crunchbase's official Doughouz Group profile reveals two explosive details:
Third Co-Founder: Younes Doughouz
Named as a third co-founder of ScriptSun alongside Elin and Deen. Three brothers, not two.
“Military Technology Providers”
Doughouz Group's official portfolio per Crunchbase:
“ScriptSun, Ultahost, WoWonder, Playtube, DeepSound, PixelPhoto, Wolvor Global for Military technology providers.”
The same family that runs UltaHost — a hosting company linked to 728 phishing domains, ICANN-breached, openly marketed as bulletproof — also operates “Wolvor Global” which they self-describe as a military technology venture. This is significant context for any government, defense, or critical-infrastructure entity considering doing business with any Doughouz Group brand.
Source: Crunchbase — Doughouz Group
4. Caught Astroturfing Reddit With Shill Accounts
“They spam Reddit u/AngeLink-Official posted spam on behalf of Ultahost to r/digitalnomad saying ‘When people search for Top Managed VPS Hosting...’”
— Trustpilot reviewer
Direct evidence of paid astroturfing on Reddit using accounts not disclosed as having a business relationship — adds to the existing evidence of paid Trustpilot reviews, dual Trustpilot profiles, and Sitejabber compensation warnings.
Source: Trustpilot page 8
5. Punishes Critics While Protecting Criminals — Selective “DMCA Ignored”
“My website contained a few pages criticizing the behaviour of someone who sent a DMCA email to Ultahost. Ultahost then terminated my services and denied all requests for a refund, even 8 days after the start of the service. Ultahost therefore reacted with what appeared to be, legal paranoia, and no desire to promote freedom of speech in the slightest.”
— Trustpilot reviewer
The Selective Application Pattern
UltaHost protects customers who are useful (criminal operators paying for bulletproof hosting) and silences those who are inconvenient (small businesses raising complaints).
6. Industry Consensus: UltaHost Is Bulletproof Hosting
Multiple mainstream hosting directories now independently classify UltaHost:
HostAdvice — 8 Best Bulletproof Hosting Providers (April 2026)
“Ultahost is the best bulletproof hosting provider known for its up to 20x faster page load times”
https://hostadvice.com/bulletproof-hosting/HostAdvice — 8 Best Online Casino Hosting Providers (Feb 2026)
“UltaHost listed as casino hosting infrastructure for online gambling platforms.”
https://hostadvice.com/offshore-hosting/online-casino-hosting/WebsitePlanet — 7 Best DMCA-Ignored Hosting [2026]
“UltaHost ranked #4: DMCA-Ignored Hosting in a Number of Offshore Jurisdictions.”
https://www.websiteplanet.com/blog/best-dmca-ignored-hosting-services/OnlyLoudest — Top 10 Best DMCA Ignored Hosting 2026
“UltaHost ranked #2.”
https://onlyloudest.com/best-dmca-ignored-hosting/When multiple mainstream hosting directories independently classify a host this way, it's no longer an accusation — it's an industry consensus.
7. Operations in Restricted Jurisdictions & Their Own Blog Admits It
UltaHost data centers per HostScore include: Saudi Arabia, UAE, Turkey, South Africa, and Iran connectivity (per Trustpilot). Marketing pitches “complete anonymity” + “DMCA Ignored” in these jurisdictions.
“UltaHost is the leader in offshore hosting with a relaxed approach to copyright law. DMCA-ignored servers allow you to stream or share content that lawyers and governments believe violates copyright law.”
— UltaHost official blog
This is UltaHost themselves — not their critics — explicitly saying their service exists to help you do things that lawyers and governments believe are illegal.
Source: ultahost.com/blog
8. The Crypto Refund Trap — A Deliberate Mechanism
“Ultahost prominently advertises a ‘Money Back Guarantee’... stating: ‘While we are sure you'll love our web hosting services... you get the flexibility to cancel the plan within 30 days.’ This statement lacks any clear exceptions or exclusions. I signed up and paid using cryptocurrency. When I found the service unsatisfactory and canceled within the 30-day period, I requested a refund per their guarantee. Instead of honoring it, Ultahost repeatedly directed me to their refund policy — which conveniently became inaccessible after I raised concerns. Suspiciously, they updated the policy to include a note about non-refundable payment methods without changing the revision date, misleadingly still listed as ‘Last Revised: 4/1/2021.’ They refused to refund my payment, stating that cryptocurrency is a non-refundable method — a critical detail never disclosed upfront.”
— Trustpilot reviewer
“I purchased a vps from them. It proved to be very slow. So I canceled it without using it, and asked for a refund. Their support confirmed the refund to me, too bad it never arrived. Instead, they even made another charge. A company that simply steals people's money.”
“They sell fake hosting and then don't return the money. The hosting they have is not a fact that they are available and it is not a fact that they will work.”
New Specific Patterns
- ●UltaHost backdates policy edits to make them appear to predate the customer's complaint
- ●The refund policy URL becomes unreachable after a customer raises a complaint
9. Server Never Delivered, Crypto Trapped — Helsinki Case
“The new server stayed in Pending status and was never delivered. Different support agents kept giving completely different answers: ‘1–3 days’, ‘waiting for hardware shipment’, ‘no stock’, etc. At one point they even offered older/weaker hardware and different locations (Madrid / Paris) instead of the Helsinki server I actually paid for. I spent days writing tickets and chatting with support at night while my paid developers were waiting for this server to go live. In the end UltaHost admitted they could not provide the server I ordered. However, instead of a real refund, they only credited the amount to my UltaHost account balance and refused to return the crypto payment to my wallet, saying they ‘don't refund cryptocurrency’ and that this is in their policy. For me this is not a refund – it just traps my money inside their system, although they never delivered the service.”
— Trustpilot reviewer
10. The Hidden $117 PTR Records Upcharge — Bait-and-Switch
“They ask for more money if you want basic settings turned on. I bought a VPS for 1 month just to test their services. I asked them to activate PTR records and they told me that i need to buy of minimum 117$. There is no notice on the website about these restricted services. You will find out only after the payment and if you pay by crypto, kiss your money goodbye as they give no refunds. They said i can receive store credit but what use ill have for that if i need to pay more money to use a VPS.”
— Trustpilot reviewer
The Bait-and-Switch Pattern
- 1.Buy a “VPS” advertised as full-featured
- 2.Discover essential features (PTR records, Port 25) are locked
- 3.To unlock = $117+ upcharge
- 4.Cancel and refund? Crypto can't be refunded.
- 5.Account credit only — but you must spend more to actually use it.
11. Brand Impersonation Victim — Additional Detail
“Ultahost is hosting a site that impersonates my brand and scams people out of large sums of money. After refusing to reply for several weeks I was told they take abuse seriously and are investigating. After no response and clearly no investigation I was told by their rep on LinkedIn that they do not investigate abuse unless I submit a trademark or court order. There is a reason they are in breach of compliance with ICANN.”
— Trustpilot reviewer, 2026
Complete Source List — Round 4
New Primary Sources
Industry Bulletproof Hosting Classifications
Trustpilot Evidence
Why These Findings Transform the Narrative
These Round 4 findings move UltaHostAbuse.com from “UltaHost has bad practices” to “UltaHost is verifiably near the top of the global cybercrime infrastructure pyramid, run by a family hiding their identities behind shell companies across four jurisdictions, operating military technology alongside bulletproof hosting, who were in ICANN breach within months of becoming a registrar — with literally zero legitimate .com domain registrations.”
Compiled April 2026. All information publicly sourced for accountability journalism purposes.