wealth-reserves[.]com

The domain wealth-reserves.com was registered on 2 November 2025 through Dynadot Inc. It is currently resolved to the IPv4 address 198.251.89.229 and is served by the name servers ns111.asurahosting.com, ns112.asurahosting.com, ns111.my‑control‑panel.com, and ns112.m. The domain remains active as of the assessment date, 27 July 2026. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain, indicating that a subset of scanners have detected malicious characteristics.

The domain also appears on a single public blocklist and has been added to the PhishDestroy blocklist, confirming that at least one anti‑phishing service is actively preventing access. No public information about SSL/TLS configuration, HTTP response codes, or page titles has been published, so the surface‑level web content cannot be corroborated at this time. Infrastructure analysis suggests the hosting provider is using the Asurahosting network, which is commonly observed in other abuse reports, but the specific hosting location or autonomous system number is not disclosed in the available data.

The lack of additional contextual indicators such as brand targeting, credential‑stealing kits, or observed traffic patterns leaves the exact attack vector ambiguous, though the classification as a generic phishing campaign aligns with the vendor detections. Defenders should block or sinkhole the domain and its associated IP address, monitor DNS queries for the listed name servers, and incorporate the domain hash into threat‑intel feeds. Continuous re‑evaluation is advised, as future scans may reveal further malicious payloads or expanded infrastructure.