# granfeldinvest.com — SUSPICIOUS

> granfeldinvest.com is a newly registered domain (Feb 2026) impersonating a fake investment firm. Users should avoid entering personal or financial data.

## Summary
PhishDestroy identifies granfeldinvest.com as an active fake investment scam under investigation.

This domain was flagged for generic phishing: it resolves to 91.210.108.170, uses a Let's Encrypt SSL certificate, was registered via NAMECHEAP INC on February 05, 2026, and currently shows 0/95 VirusTotal detections with no blocklist entries or trust score penalties.

Users must avoid interactions, especially financial transactions. Report the domain to hosting providers and security vendors while monitoring for new IOCs as the investigation continues.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-05 10:46:13
- Registrar: NAMECHEAP INC
- IP: 91.210.108.170

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2c971636-49b9-40f4-9139-ccabce4b9be4
- PhishDestroy: https://phishdestroy.io/domain/granfeldinvest.com/
- LLM endpoint: https://phishdestroy.io/domain/granfeldinvest.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/granfeldinvest.com/
Last updated: 2026-03-21