bgwealthgroup[.]com

Analysis of www.bgwealthgroup.com indicates that the domain is actively used in a phishing campaign. The domain was registered on May 02, 2019 through GoDaddy.com, LLC and is served by the default GoDaddy name servers ns31.domaincontrol.com and ns32.domaincontrol.com. DNS resolution points to the IPv4 address 206.168.149.10, which remains reachable as of the report date, confirming that the infrastructure is still online. The domain appears on a single security blocklist and is specifically listed by PhishDestroy, demonstrating that at least one anti‑phishing feed has classified it as malicious.

VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the scanners raised a detection at the time of the scan. While the lack of detections does not constitute a safety guarantee, it does indicate that the malicious payload, if any, has not yet been captured by the current vendor signatures. The available intelligence does not include SSL certificate details, HTTP response codes, or page‑title content, leaving the surface‑web characteristics of the site unverified. Consequently, the exact phishing lure cannot be confirmed beyond the generic classification.

Defenders should treat the domain as hostile and block network communications to 206.168.149.10 and to www.bgwealthgroup.com at DNS and HTTP layers. Email gateways should be updated to flag any messages containing URLs that resolve to this domain. Continuous monitoring of the IP address and DNS records is advised, as the operator may shift hosting or employ additional sub‑domains. Because the domain is still active, threat‑intel feeds should be refreshed regularly to capture any new detections or reputation changes.