megawealthgroup[.]xyz

The domain megawealthgroup.xyz was registered on 2026-01-02 through Dynadot Inc and remains active as of the report date 2026-07-27. DNS resolution points to the IPv4 address 86.107.77.178, which is served by the authoritative name servers ns9.netlightsystems.com and ns10.netlightsystems.com. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one anti‑phishing repository has catalogued it as malicious.

VirusTotal analysis shows that 2 out of 91 scanned security vendors have flagged the domain, providing additional independent confirmation of suspicious activity. No further public intelligence such as page title, brand targeting, or observed payloads has been released, so the exact phishing campaign details remain unknown. The limited detection footprint suggests a relatively new infrastructure, consistent with the January registration date.

Defenders should treat the domain as high‑risk: it should be added to network deny lists, DNS filtering policies, and endpoint protection block lists. Continuous monitoring of the associated IP address and its hosting environment is advised, as the address may host additional malicious domains. Organizations should also review any recent user reports of credential‑harvesting emails that reference the domain, and consider incident response actions if compromise is suspected.