# cryptocurrencyinvestigationbook.com — MALICIOUS

> cryptocurrencyinvestigationbook.com is under phishing investigation. Exercise caution and avoid sharing sensitive info on this new domain.

## Summary
PhishDestroy identifies cryptocurrencyinvestigationbook.com as a domain exhibiting potential generic phishing activity, posing risks to users who may be targeted for sensitive information theft. Though the domain has not yet been flagged by security vendors, its behavior aligns with phishing tactics typically used to deceive users in the cryptocurrency niche, warranting close monitoring.

The domain was registered recently on February 20, 2025, through Porkbun LLC, and resolves to the IP address 44.227.76.166. Despite passing all VirusTotal scans with zero detections, its fresh registration date and association with a sector frequently targeted by fraudsters raise concerns. The domain remains active and is currently under investigation by PhishDestroy to determine its intent and potential connections to malicious infrastructure.

Users are advised to remain vigilant and avoid interacting with cryptocurrencyinvestigationbook.com, especially refraining from entering any personal or financial information. Until further clarity is provided, it is prudent to treat this domain with suspicion. Employing updated security tools and keeping abreast of phishing alerts like those from PhishDestroy can help mitigate potential risks associated with emerging threats such as this.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: porkbun.com | expired domain

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Porkbun LLC
- Country: US
- IP: 44.227.76.166
- IP Country: US
- IP City: Boardman
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ["curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com"]
- SSL Issuer: Let's Encrypt / R12

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["alphaMountain.ai", "Gridinsoft", "Seclookup", "SOCRadar", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc29a-de71-74eb-9f31-e278b367b601.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/cryptocurrencyinvestigationbook.com
- Wayback Machine: https://web.archive.org/web/https://cryptocurrencyinvestigationbook.com
- PhishDestroy: https://phishdestroy.io/domain/cryptocurrencyinvestigationbook.com/
- LLM endpoint: https://phishdestroy.io/domain/cryptocurrencyinvestigationbook.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cryptocurrencyinvestigationbook.com/
Last updated: 2026-03-19