> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# IOC Alert: Suspicious C2 Domain Masquerading as Guarda Wallet – app-guarda[.]com
- URL: https://darkwebinformer.com/ioc-alert-suspicious-c2-domain-masquerading-as-guarda-wallet-app-guarda-com/
- Published: 2025-09-01T17:05:08.000Z
- Updated: 2025-09-04T22:19:40.000Z
- Author: Dark Web Informer
- Tags: IOC

📖 **Overview**  
A domain-based indicator has been identified hosting a fake cryptocurrency wallet page imitating **Guarda Wallet**. This domain is linked to command-and-control infrastructure and represents a high-confidence threat. Users interacting with it risk credential theft and potential loss of digital assets.

---

📌 **Key Details**

| Field           | Information                |
| --------------- | -------------------------- |
| **Type**        | Domain                     |
| **Indicator**   | app-guarda\[.\]com         |
| **Threat Type** | Botnet C2                  |
| **Malware**     | unknown                    |
| **Confidence**  | 100%                       |
| **Date**        | 01 Sep 2025 – 14:24:17 UTC |
| **Tags**        | c2                         |
| **Reporter**    | PunisherRipRip             |

---

🔎 **URLScan Result**  
Page Title: Guarda Wallet  
Screenshot: <https://urlscan.io/screenshots/01990200-977c-718c-9512-7c14981e610e.png>  
Result: [https://urlscan.io/result/01990200-977c-718c-9512-7c14981e610e/](https://urlscan.io/result/01990200-977c-718c-9512-7c14981e610e)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/09/189724698712489723587961-2.jpg)

---

📡 **Related Intelligence**  
WHOIS Record: <https://who.is/whois/app-guarda.com>  
VirusTotal Report: <https://www.virustotal.com/gui/domain/app-guarda.com>

---

🛡️ **Defensive Guidance**

- Block `app-guarda[.]com` at DNS, proxy, and endpoint layers.
- Monitor for user attempts to interact with fake cryptocurrency wallet infrastructure.
- Hunt for credential exfiltration attempts in endpoint telemetry.
- Review logs for connections to infrastructure imitating legitimate wallet services.