firstguarantybank[.]xyz

Analysis of firstguarantybank.xyz indicates a brand impersonation domain targeting Google, classified as a tech support scam. The domain was registered on February 21, 2026, and is currently offline as of July 24, 2026. Infrastructure analysis reveals the domain resolved to IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the United States. The SSL certificate is identified as R11, though specific certificate details are not provided in available intelligence.

The page title 'Welcome to | First Guaranty Bank' does not align with the reported brand target (Google), suggesting either a misconfiguration or an attempt to mislead victims under a false financial institution pretext. Detection data shows the domain was flagged by 7 of 93 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. Trust scores from Scamadviser (16/100) and Gridinsoft (0/100) further indicate malicious intent. While the domain is currently inactive, defenders should treat it as a confirmed threat.

Recommended actions include blocking the domain and associated IP (192.3.190.186) at perimeter security controls, monitoring for related infrastructure reuse, and alerting users to tech support scam tactics. The discrepancy between the page title and reported brand target warrants further investigation to determine the exact phishing kit or campaign in use. No additional evidence of payload delivery or victim interaction is available at this time.