# invest-program-kz24.info — SUSPICIOUS

> invest-program-kz24.info lures victims with fake investment schemes. Phishing site detected with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies an active investment scam operating from invest-program-kz24.info, a recently registered domain designed to deceive users into depositing funds into fraudulent cryptocurrency or securities investment platforms. This domain mimics legitimate financial programs using generic naming conventions to avoid immediate suspicion, targeting individuals seeking high-return investment opportunities. The threat is classified as an active investment scam phishing domain, actively resolving to IP 104.21.2.232 and leveraging a Let's Encrypt SSL certificate to appear legitimate. Users interacting with this domain risk credential theft, financial loss, or malware exposure through embedded scripts or downloads.  This domain was flagged by PhishDestroy during routine threat intelligence monitoring, revealing critical red flags. The domain was registered through Dynadot Inc on March 22, 2026, and currently shows 0 detections out of 95 VirusTotal scans, indicating it has evaded traditional detection mechanisms. While the absence of detections suggests a newly active campaign, historical data indicates a high probability of rapid blacklisting as reporting increases. Additionally, the domain’s infrastructure ties to IP 104.21.2.232, a known hosting provider with a history of accommodating malicious domains, further increasing risk potential. The combination of a freshly registered domain, low detection rates, and association with suspicious infrastructure underscores the urgency of proactive blocking.  If you visited invest-program-kz24.info, cease all interaction immediately and avoid entering any personal or financial information. Scan your device for malware using reputable antivirus software, such as Windows Defender, Malwarebytes, or Bitdefender, and review financial accounts for unauthorized transactions. Report the domain to your cybersecurity team or platform provider and block future access via firewall rules or DNS filtering. For comprehensive remediation, consult CISA’s phishing guidance at cisa.gov/phishing. Stay vigilant—this campaign may evolve or spawn related domains targeting similar victims. Always verify investment platforms through official regulatory channels before engagement.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-22 10:33:24
- Registrar: Dynadot Inc
- IP: 104.21.2.232

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8eb1cd00-fe82-4615-a5c2-e42abaa3d0ad
- PhishDestroy: https://phishdestroy.io/domain/invest-program-kz24.info/
- LLM endpoint: https://phishdestroy.io/domain/invest-program-kz24.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/invest-program-kz24.info/
Last updated: 2026-03-23