Research Methodology

Last updated: May 17, 2026

How we gather evidence

Every claim on this website is backed by publicly available evidence. We do not rely on anonymous tips, unverifiable rumors, or insider leaks. Our methodology is designed so that any reader can independently verify everything we publish — usually in under five minutes. The next section walks you through exactly how.

Verify our claims yourself

These are the major claims we make about UltaHost, with the public URL and a step-by-step verification path for each. Open the source in a new tab and check.

1. ICANN issued a Notice of Breach on 5 February 2025

  1. Open the official ICANN PDF: icann.org/uploads/compliance_notice/attachment/1257/hedlund-to-doughous-5feb25.pdf
  2. Verify: addressee is “Mr. Elin Doughous” / UltaHost, Inc., IANA #4331. Date stamp top of page: 5 February 2025.
  3. The cited breach sections are RAA §3.18.2 (DNS abuse mitigation) and §3.18.4 (abuse records).

2. PhishDestroy ranks UltaHost #3 worst registrar globally

  1. Open: phishdestroy.io/registrar-stats/
  2. Sort by risk score descending. UltaHost, Inc. appears as #3 (risk score 68/100, behind only DomainRegistry.com LLC and Eranet International).
  3. Click through to the UltaHost-specific page: phishdestroy.io/domain/?registrar=Ultahost,+Inc. to see the full list of 728 flagged phishing domains.

3. ULTAHOST LTD UK is a £10,000 shell company

  1. Open UK Companies House: find-and-update.company-information.service.gov.uk/company/14567126
  2. Verify the registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
  3. Click “Officers”: Elin Doughous listed as both Director AND Secretary.
  4. Click “Persons with significant control”: Elin Doughous, 75%+ ownership, 75%+ voting rights, right to appoint/remove directors. Nationality: Turkish. Country of residence: Turkey.
  5. Click “Filing history”: most recent share capital filing shows £10,000.

4. UltaHost was in breach within MONTHS of becoming a registrar — with ZERO .com registrations

  1. Open the DomainNameWire trade-publication article: domainnamewire.com/2025/02/05/new-domain-registrar-already-in-breach-of-accreditation-agreement/
  2. Read paragraph 2: “Ultahost signed its accreditation agreement in September and was assigned IANA#4331. As of the end of October, it had no .com registrations.”

5. UltaHost itself admits to operating across four jurisdictions

  1. Open UltaHost's own Terms of Service: ultahost.com/terms
  2. Search the page for the word “Dubai”. You'll find the exact text we quote: “UltaHost Dubai, UltaHost Istanbul, UltaHost Ltd UK, and UltaHost Inc USA.”

6. UltaHost itself admits the bulletproof-hosting model

  1. Open UltaHost's own blog post: ultahost.com/blog/what-is-offshore-hosting-can-hosting-provider-ignore-dmca/
  2. Verify the exact quote: “DMCA-ignored servers allow you to stream or share content that lawyers and governments believe violates copyright law.”

7. UltaHost's affiliate program offers up to 70% commission in cryptocurrency

  1. Open UltaHost's own affiliate page: ultahost.com/affiliates
  2. Read the FAQ. The verbatim quotes we use are all on that page: “up to 70% per sale”, “100 to 300$ per sale”, “Crypto transfer”, “maximum payout is 50% of your total commissions”.

8. UltaHost's refund policy pre-classifies chargebacks as “criminal fraud”

  1. Open UltaHost's own refund policy: ultahost.com/refund
  2. Search for the words “criminal fraud”. The exact text appears: “In cases of blatant payment or criminal fraud chargebacks, the service will be discontinued without any opportunity for recovery.”

9. Multiple industry directories classify UltaHost as bulletproof hosting

  1. HostAdvice “8 Best Bulletproof Hosting Providers” — Ctrl-F “Ultahost”.
  2. WebsitePlanet “7 Best DMCA-Ignored Hosting” — UltaHost listed at #4.
  3. OnlyLoudest “Top 10 Best DMCA Ignored Hosting” — UltaHost listed at #2.
  4. Bolster AI bulletproof-hosting analysis names UltaHost alongside Private Alps, Alex Hosting, EliteTeam, FlyHosting, FiberGrid, Warez-Host.

10. UltaHost's AS214036 announces bogons

  1. Open BGP.HE.net's AS214036 page: bgp.he.net/AS214036
  2. Look for the “Announces Bogons” flag in the AS information section.

11. Trustpilot has flagged UltaHost for fake reviews

  1. Open UltaHost's Trustpilot profile: trustpilot.com/review/ultahost.com
  2. Look at the top of the page for the platform warning: “We've removed a number of fake reviews for this company.”
  3. For Sitejabber's compensation-for-reviews warning, search for the UltaHost profile and look for the platform-issued banner.
  4. Compare two Trustpilot profiles for the same operation: ultahost.com (5-star concentrated) vs ultahost.io (1-star concentrated).

Every other major claim on this site follows the same pattern: open the linked source, read the quoted text, confirm. If you find a claim where this doesn't work, email contact@ultahostabuse.comand we'll correct or remove it.

Primary sources

Regulatory & government

  • ICANN Compliance: Official PDF notices from ICANN's compliance division (icann.org/compliance).
  • UK Companies House: Free public register of UK companies, officers, ownership, and filings.
  • CISA: US Cybersecurity & Infrastructure Security Agency published guidance on bulletproof hosting.
  • BBB: Public rating, accreditation status, complaint data.

Cybersecurity / threat intelligence

  • PhishDestroy: Phishing-domain abuse reports filed against UltaHost-registered domains; registrar-risk scoring across 104 registrars.
  • Scamalytics: ISP fraud-risk scoring based on traffic analysis (UltaHost: 40/100).
  • VirusTotal: Domain threat scoring from 70+ antivirus engines.
  • Bolster AI: Anti-phishing cybersecurity research naming UltaHost in bulletproof-hosting analysis.
  • AbuseIPDB: Per-IP abuse reports from security researchers and network operators.
  • ScamDetector.com: Website trust scoring (UltaHost: 58.5/100).
  • Spamhaus: Bulletproof-hosting definition and SBL/BCL/XBL listings.
  • abuse.ch: URLhaus malware URLs, ThreatFox IoCs, Feodo Tracker banking-trojan C&C servers.

Network / BGP

  • BGP.HE.net: AS214036 routing information, including bogon-announcement flag.
  • bgp.tools, BGPView, IPinfo: Cross-references for AS214036 domain counts, IP ranges, upstream carriers.

Customer review platforms

  • Trustpilot: Both ultahost.com and ultahost.io profiles. Fake-review removal warnings noted.
  • Sitejabber: Including compensation-for-reviews warnings.
  • HostScore: User ratings and performance metrics (79.2% overall).
  • HostDean: User reviews including specific abuse-report experiences.
  • WebHostingTalk: Industry forum discussions.
  • BlackHatWorld: Grey-hat / cybercrime community comparisons of UltaHost vs other hosts.
  • G2: Negative-sentiment theme analysis (German-language complaints).

Independent testing

  • WebsitePlanet: Independent one-month uptime test (43.78% recorded; 17 consecutive days down).

UltaHost's own admissions

  • ultahost.com — marketing pages with product descriptions.
  • ultahost.com/terms — admits 4-jurisdiction structure.
  • ultahost.com/refund — “criminal fraud chargebacks” clause.
  • ultahost.com/affiliates — 70% commission disclosure.
  • ultahost.com/blog — own admission of the bulletproof-hosting model.

Verification process (internal)

  1. Source identification: Every claim originates from a public source.
  2. Cross-referencing: Where possible, we verify claims across multiple independent sources before publishing.
  3. Direct quoting: We use verbatim quotes with attribution rather than paraphrasing to avoid misrepresentation.
  4. Archive preservation: Wherever a source might be edited (UltaHost's own pages, customer reviews), we cross-check with archive.org snapshots.
  5. Date stamping: All evidence is dated. Every page carries a “Last updated” field.
  6. Link provision: We provide direct links to source material; readers should never have to take our word for anything.
  7. Conservative numerics: When estimating (e.g. financial-impact), we use the most defensible low-end multipliers, not the highest plausible figures.

What we don't do

  • We do not fabricate quotes or statistics.
  • We do not pay for reviews or testimonials.
  • We do not make claims we cannot source.
  • We do not make personal allegations against individuals (corporate conduct only).
  • We do not accept advertising, sponsorship, or affiliate commission from UltaHost competitors.
  • We do not name family members not involved in the business.
  • We do not publish material from confidential leaks, hacked data, or unauthorized sources.

Corrections policy

If any information on this site is demonstrated to be factually incorrect, we will promptly correct it and note the correction. Contact contact@ultahostabuse.com with specific details of any claimed inaccuracy and supporting evidence (link to the contradicting source, screenshot, dated record).

For right-of-reply requests from UltaHost, its officers, or its legal representatives: we will publish your response inline alongside the relevant claim within 5 working days, provided it addresses a specific factual claim and provides verifiable counter-evidence.