wealthguard[.]site

Analysis of the domain wealthguard.site indicates it was actively involved in a crypto scam impersonating the brand Across, as evidenced by its page title 'Wealth Guard - Home' and explicit classification in threat intelligence sources. The domain resolved to the IP address 86.107.77.178, hosted under AS216395 (HostBet Cloud Technologies Private Limited) in Germany. At the time of assessment, the domain was flagged by one security vendor on VirusTotal and appeared on a single security blocklist, suggesting limited but targeted detection. The domain was blocked by PhishDestroy, further corroborating its malicious classification.

Registration records show the domain was created on February 21, 2026, providing a temporal anchor for its operational timeline. SSL certificate analysis reveals the use of a R11 certificate, which, while not inherently malicious, is consistent with low-effort or ephemeral phishing infrastructure. Trust scores from Gridinsoft and Scamadviser both indicate high risk, with scores of 0/100 and 1/100 respectively, reinforcing the domain's fraudulent nature. As of July 22, 2026, the domain has been taken offline, though defenders should remain vigilant for potential re-emergence under similar infrastructure or domain variations.

The specific scam mechanics remain unconfirmed due to the lack of detailed page analysis, but the available evidence aligns with crypto-related fraud targeting users of the Across platform. Defenders are advised to monitor related IPs, particularly 86.107.77.178, and domains registered under the same ASN or hosting provider for signs of recurring activity. Proactive blocking of the domain and its associated IP is recommended for organizations with exposure to crypto or financial services.