guaranty-venture[.]com

Analysis conducted on July 12, 2026 identifies guaranty-venture.com as an active generic phishing site. The domain was registered on June 10, 2026 through TUCOWS.COM, CO., and the sole MX record points to the domain itself, a pattern often used to obscure mail handling. The site presents the page title “Guaranty-venture | Investment & Trading”, mimicking legitimate financial services to lure victims.

Infrastructure analysis shows the domain resolves to IP address 67.217.57.170, hosted in the United States under AS19318 Interserver, Inc. Nameservers webhosting3007a.trouble-free.net and webhosting3007b.trouble-free.net are typical of low‑cost hosting providers and have been associated with other malicious deployments. The site serves over HTTPS using a Let’s Encrypt certificate (YR1), indicating the operators have taken minimal steps to avoid browser warnings. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious nature of the host.

Threat indicators include a HTTP 200 response, confirming the site is actively serving content. VirusTotal reports that 7 of 95 scanned security vendors flag the domain, and it appears on at least one public blocklist, demonstrating consensus among security tools. PhishDestroy has already blocked the domain, confirming its use in phishing campaigns. The combination of a convincing financial‑oriented page title, active HTTPS service, and low trust scores aligns with the generic phishing classification.

Defenders should immediately add guaranty-venture.com to URL filtering and DNS blocklists, and monitor outbound connections to its IP address 67.217.57.170. Email gateways should reject or quarantine messages that reference the domain, especially those using the domain’s MX record. Continuous threat‑intel feeds should be consulted for any emerging indicators, and incident response teams should be prepared to investigate any user reports of credential harvesting or fraudulent investment offers linked to this site.