growthgeniuss[.]ltd

The domain growthgeniuss.ltd is a confirmed phishing site engaged in brand impersonation targeting the financial platform 'across'. It operated as an investment scam, presenting itself as a 'Financial Investment platform' to deceive users into transferring funds. No crypto drainer kit was identified. The site is currently taken offline, but prior activity posed an elevated risk to victims.

Technical indicators show growthgeniuss.ltd was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Seclookup. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered on April 16, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu and resolved to the IP address 198.12.80.250, hosted on AS36352 (HostPapa) in the US. No SSL certificate was issued, and the domain used a single nameserver. Gridinsoft assigned a trust score of 0/100.

Users who interacted with growthgeniuss.ltd should immediately monitor their financial accounts for unauthorized transactions and report any suspicious activity to their bank or investment platform. If credentials were entered, change passwords and enable two-factor authentication (2FA) on all related accounts. Victims can report the domain to their local cybercrime unit, the FTC at reportfraud.ftc.gov, or the impersonated brand 'across' for further investigation. Avoid reusing passwords and consider freezing credit if personal data was exposed.