# ranger-finance.app — MALICIOUS

> Warning: ranger-finance.app is a medium-risk phishing site now offline. Avoid interaction and monitor for related threats.

## Summary
PhishDestroy identifies ranger-finance.app as a generic phishing domain targeting unsuspecting users with financial fraud. The domain was registered on February 21, 2026, and classified as medium risk based on threat intelligence.

Technical analysis reveals the domain was flagged by 8 out of 95 security vendors on VirusTotal and appeared on two security blocklists. It was registered through a dead domain service, indicating potential use of disposable infrastructure.

Currently, ranger-finance.app is taken offline, reducing immediate threat exposure. Users and organizations should remain vigilant for possible phishing campaigns leveraging similar tactics or domain variants.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: $WIF | Literally just a dog with a hat.

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 94.181.203.96
- SSL Issuer: R13

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["alphaMountain.ai", "CRDF", "CyRadar", "Ermes", "ESET", "G-Data", "Gridinsoft", "Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01997433-807d-7208-b9d8-c5a1e07baa97.png
- PhishDestroy: https://phishdestroy.io/domain/ranger-finance.app/
- LLM endpoint: https://phishdestroy.io/domain/ranger-finance.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ranger-finance.app/
Last updated: 2026-03-19