Did UltaHost receive an official ICANN breach notice?

Yes. On February 5, 2025, ICANN issued a formal Notice of Breach to UltaHost, Inc. (IANA #4331) for violations of the Registrar Accreditation Agreement, including failure to mitigate DNS abuse (Section 3.18.2) and failure to provide abuse records (Section 3.18.4).

How many phishing domains have been reported on UltaHost?

As of August 2026, PhishDestroy has flagged 1,134 phishing domains registered through UltaHost, Inc. with 511 formal abuse reports filed. 698 domains (61.6%) remain alive, and PhishDestroy's registrar index records 58% of reported domains as still active — a figure PhishDestroy does not present as a measurement of how quickly a registrar responds. 98.5% were confirmed malicious by VirusTotal.

What is UltaHost's BBB rating?

UltaHost has a D+ rating from the Better Business Bureau (BBB). They are not accredited. 6 complaints have been filed, with failure to respond to at least 1.

What uptime has been recorded for UltaHost?

WebsitePlanet's independent 2026 test recorded only 43.78% uptime over one month, with the site down for 17 consecutive days. The industry standard is 99.9% uptime.

Who founded UltaHost?

Per Crunchbase, UltaHost's co-founders are Elin Doughouz (CEO), Deen Doughouz (CTO) and Younes Doughouz, who are also associated with the ScriptSun script-publishing brand (WoWonder, PlayTube, DeepSound, PixelPhoto) and Wolvor Global under the Doughouz Group name. Only one company in this group appears on the UK register: ULTAHOST LTD (14567126). There is no UK-registered ScriptSun, WoWonder, Wolvor or Doughouz company.

Does UltaHost offer DMCA ignored hosting?

Yes. UltaHost actively markets DMCA Ignored VPS, DMCA Ignored Dedicated servers, and Anonymous VPS products through offshore data centers in the Netherlands and Luxembourg. Their website states 'complete freedom of material' and notes it is 'possible to violate the laws, rules, or cultural norms of one or more countries.'

What is UltaHost's fraud risk score?

Scamalytics rates UltaHost, Inc. as a medium fraud risk ISP with a score of 37/100, meaning approximately 37% of web traffic from their infrastructure is suspected to be potentially fraudulent.

Doughouz Family Products — All Six Brands

UltaHost is one of six brands operated by the Doughouz family. The others share the same ownership chain, the same multi-jurisdictional shell-company structure, and, for the script-publishing products, the same documented customer-trust concerns.

Per Crunchbase, the Doughouz Group portfolio includes: ScriptSun (parent), UltaHost (hosting), WoWonder, PlayTube, DeepSound, PixelPhoto (CodeCanyon scripts under “DoughouzForest”), and Wolvor Global (“Military technology providers”).

WoWonder

→

Social network PHP script (CodeCanyon)

PHP social-network script with repeated backdoor allegations from customers.

ScriptSun

→

Script publishing company (parent of WoWonder, PlayTube, DeepSound, PixelPhoto)

Doughouz family's script-publishing brand. Three co-founders per Crunchbase, four claimed jurisdictions.

PlayTube

→

Video-sharing PHP script (CodeCanyon)

PHP video-sharing script — same seller, same family, same structural concerns.

DeepSound

→

Music/audio sharing PHP script (CodeCanyon)

PHP music/audio sharing script — same seller, same family, same concerns.

PixelPhoto

→

Image/photo sharing PHP script (CodeCanyon)

PHP image/photo sharing script — same seller, same family, same concerns.

Wolvor Global

→

Military technology venture (per Crunchbase)

Doughouz family's self-described 'military technology providers' venture.

The structural picture: The Doughouz family controls every layer: the script supply (DoughouzForest CodeCanyon brand, 9,982+ purchases), the hosting infrastructure (UltaHost), the installation service (“Envato Hosting”), and an additional military-technology venture (Wolvor Global). When customers of WoWonder report backdoors in the script and get their site hacked, the documented pattern is for the script vendor to blame the host, except the same family runs both. This is a structural conflict of interest we document; we make no allegation about specific intent.