cryptoguard[.]digital
“CryptoGuard — Comprehensive cryptocurrency wallet audit”
Stored observation
Observed title contrast
Evidence Summary
Analysis of the domain cryptoguard.digital indicates it is an active high-risk crypto scam site, registered on February 23, 2026, through Web Commerce Communications Limited. The domain resolves to IP address 87.236.16.177, hosted on AS198610 (Beget LLC) in Russia, with nameservers ns1.beget.pro, ns2.beget.pro, ns1.beget.com, and ns2.beget.com. As of July 25, 2026, the site returns an HTTP 200 status, suggesting operational availability, though it lacks an SSL certificate, increasing vulnerability to interception. The page title, 'CryptoGuard — Comprehensive cryptocurrency wallet audit,' implies a focus on cryptocurrency security services, aligning with the classified scam type of 'Crypto Scam' in available threat intelligence.
Detection data is limited but notable: one of 93 security vendors on VirusTotal flags the domain, and it appears on a single security blocklist, specifically PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk classification. The site employs technologies including PHP, Vue.js, Nginx, Unpkg, and jsDelivr, which are common in both legitimate and malicious web applications, offering no definitive indication of intent on their own. Infrastructure analysis reveals no evidence of widespread detection or takedown efforts, though the low vendor flag count may reflect limited visibility rather than benign status.
Defenders should treat this domain as actively malicious, particularly in environments handling cryptocurrency transactions or wallet security. Network-level blocking of the IP 87.236.16.177 and associated nameservers is recommended, alongside monitoring for related domains registered through the same registrar or hosted on Beget LLC infrastructure. The exact content and functionality of the site remain unanalyzed; however, the available evidence supports categorizing cryptoguard.digital as a fraudulent crypto audit service targeting users seeking wallet security.
Data Coverage
Security Signals
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
Domain status
Reachable → Unreachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive