# monslead-invest.cfd — MALICIOUS

> monslead-invest.cfd is a high-risk phishing domain now offline. Check this domain's safety and stay protected from scams. Learn more and act cautiously.

## Summary
PhishDestroy identifies monslead-invest.cfd as a generic phishing domain created on February 21, 2026. The classification is based on its association with fraudulent activity targeting users through deceptive tactics.

Technical indicators include its resolution to IP address 104.21.18.204 and registration via Porkbun LLC. The domain appears on two security blocklists and is flagged by 14 out of 95 VirusTotal vendors, supporting its malicious intent.

Currently, monslead-invest.cfd is offline, having been taken down to prevent further phishing attempts. Users are advised to avoid any interaction with this domain and remain vigilant against similar threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 400)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Porkbun LLC
- Country: US
- IP: 104.21.18.204
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: felipe.ns.cloudflare.com jule.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "Cluster25", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Netcraft", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c7b38-fc17-7698-a7f3-45423a5e40f6.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/74311d8a-6054-4a62-9660-dc18306ee48c
- Wayback Machine: https://web.archive.org/web/https://monslead-invest.cfd
- PhishDestroy: https://phishdestroy.io/domain/monslead-invest.cfd/
- LLM endpoint: https://phishdestroy.io/domain/monslead-invest.cfd/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/monslead-invest.cfd/
Last updated: 2026-03-19