wealthforge-investments[.]org

wealthforge-investments.org is currently classified as an active high-risk phishing domain based on multiple technical indicators. The domain was registered through NameSilo, LLC on January 01, 2025, and as of the July 27, 2026 report date, it remains operational. Infrastructure analysis shows the domain resolves to IP address 91.235.142.249, utilizing the nameservers ns21.v-sys.org and ns22.v-sys.org. This setup may indicate alignment with known patterns observed in phishing campaigns leveraging similar hosting and DNS configurations.

The domain has been flagged by the PhishDestroy blocklist, confirming its presence on at least one major threat intelligence platform. VirusTotal scans report detection by 10 out of 91 security vendors, further substantiating the risk associated with this domain. This detection count suggests widespread recognition within the cybersecurity community of its malicious nature. However, no specific brand, page title, or scam kit is identified in the available intelligence, and the exact content hosted by the domain has not yet been analyzed.

Given the current active status and the evidence of blocklisting and significant detection rates, defenders are advised to implement strict blocking of wealthforge-investments.org across all networks and endpoints. Monitoring for connections to IP 91.235.142.249 and associated nameservers may assist in identifying related phishing infrastructure. Further investigation is recommended to assess any additional risk beyond what is already documented. The domain should be treated as a credible phishing threat until more detailed analysis is conducted.