# deconinvestment.com — SUSPICIOUS

> Deconinvestment.com is linked to phishing activity. Stay vigilant and avoid sharing personal info. Report suspicious sites immediately.

## Summary
PhishDestroy identifies deconinvestment.com as a low-risk generic phishing domain, first registered on October 21, 2022. The domain's classification aligns with typical phishing tactics targeting unsuspecting users.

This domain resolves to IP 188.114.96.3 and is registered via Ultahost, Inc. VirusTotal flags deconinvestment.com by 2 out of 95 security vendors, suggesting limited but credible suspicion. The domain's recent creation and hosting details are consistent with transient phishing infrastructure.

Currently, deconinvestment.com remains active and under monitoring. Users are advised to exercise caution and avoid engaging with this domain. PhishDestroy continues to track its activity to mitigate potential threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Decon Investment – Safe investment with Decon Investment

## Domain Intelligence
- Registered: 2022-10-21 10:47:36
- Registrar: Ultahost, Inc.
- Country: US
- IP: 188.114.96.3
- Nameservers: lars.ns.cloudflare.com veda.ns.cloudflare.com

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ESET", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/kVH0cjzP/fd89f7ddaa30.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a8802484-2aa2-477d-8e7b-0a103c6803c5
- PhishDestroy: https://phishdestroy.io/domain/deconinvestment.com/
- LLM endpoint: https://phishdestroy.io/domain/deconinvestment.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/deconinvestment.com/
Last updated: 2026-03-19