wealthrecoverypartners[.]net

wealthrecoverypartners.net was registered on May 05, 2025 through GoDaddy.com, LLC. The domain resolves to the IPv4 address 76.223.105.230, which is announced by AS16509 belonging to Amazon.com, Inc. and geolocated to the United States. Authoritative name servers are ns11.domaincontrol.com and ns12.domaincontrol.com, both operated by GoDaddy, indicating that the registration infrastructure remains under the registrar’s control. Network and web service analysis shows the site returns an HTTP 301 redirect and implements HSTS, Cloudflare front‑end services, and HTTP/3 protocol support. The TLS certificate is issued by Google Trust Services under the WE1 designation, providing a valid chain to a public root. Reputation services rate the host at a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal records a single detection out of 95 scanners, confirming that at least one security vendor has flagged the site. The page title observed for the root URL is “Services”, and the identified scam type is cryptocurrency. The combination of a generic services page, a low trust score, and a single vendor detection aligns with a high‑risk cryptocurrency phishing campaign. The threat intelligence record assigns a risk level of high, and the domain status is reported as still active as of the 12 July 2026 assessment. Open questions remain regarding the specific payload or credential‑harvesting mechanisms employed, as the site content has not been fully inspected. Defenders should prioritize blocking the domain at perimeter firewalls and DNS resolvers, monitor outbound connections to the IP 76.223.105.230, and consider sinkholing the address to disrupt any command‑and‑control traffic. Continuous re‑evaluation of VirusTotal and blocklist entries is advised, as additional detections may emerge.