smfinancegrowth[.]net

Analysis of the domain smfinancegrowth.net indicates a brand impersonation campaign targeting Across, classified as a crypto scam. The domain was registered on February 21, 2026, through HOSTINGER operations, UAB, and resolves to IP address 163.61.188.5, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The SSL certificate is identified as R11. As of July 25, 2026, the domain is offline, though its prior activity remains under scrutiny.

Detection data reveals limited but actionable signals: one of 93 security vendors on VirusTotal flagged the domain, and it appears on a single security blocklist, specifically PhishDestroy. The Gridinsoft trust score for this domain is 0/100, reinforcing its high-risk classification. The page title recorded during active monitoring was identical to the domain name, offering no additional context about the site's content or structure. No further details about the phishing kit, redirect chains, or specific attack vectors are available at this time.

Defenders should treat this domain as a confirmed malicious indicator associated with crypto fraud. While the domain is currently offline, its infrastructure (registrar, hosting provider, and IP) may be reused for similar campaigns. Network security teams are advised to block the domain and its resolving IP (163.61.188.5) at perimeter controls, monitor for related subdomains or newly registered lookalike domains, and correlate logs for prior connections to this infrastructure. Given the single-vendor detection on VirusTotal, additional scanning or sandbox analysis may yield further indicators.