vanguardelitemarkets[.]com[.]growthguardinvestment[.]com

The domain www.vanguardelitemarkets.com.growthguardinvestment.com has been identified as a generic phishing threat, now taken offline. It impersonated Vanguard Elite Markets, a CFD trading platform, to deceive users into revealing sensitive information. The site was flagged by 6 of 95 security vendors on VirusTotal and appeared on one security blocklist. Google Safe Browsing also flagged it for phishing activity. The domain was registered through Cosmotown, Inc. on February 21, 2026, and resolved to IP address 198.251.83.106. Its SSL certificate was issued by Let's Encrypt (R12), which is commonly used by both legitimate and malicious sites. PhishDestroy assesses the risk level as elevated due to the brand impersonation and the number of vendor flags. As the domain is now offline, the immediate threat is contained, but users who may have interacted with the site should monitor for suspicious activity. It is recommended to avoid clicking links in unsolicited messages, verify website URLs carefully, and enable two-factor authentication on financial accounts. For further details, consult the full report.