# national-invest-resource.info — SUSPICIOUS

> national-invest-resource.info poses as an investment resource but harvests credentials. Resolves to 104.21.44.78; avoid all interaction.

## Summary
PhishDestroy identifies national-invest-resource.info as a currently active phishing domain impersonating an investment resource to harvest user credentials and sensitive financial information. This domain is classified under the generic_phishing threat type and remains unblocked, with its status actively monitored by security teams.  

This domain was flagged by 0 of 95 VirusTotal vendors, registered through Dynadot Inc, resolves to IP 104.21.44.78, and was created on March 22, 2026. The SSL certificate is issued by Let's Encrypt, and the domain has not been listed on any known blocklists at this time. Trust scores remain neutral due to its recent creation and lack of detections, though behavioral analysis indicates anomalous patterns consistent with phishing infrastructure.  

As the investigation is ongoing, security teams recommend blocking national-invest-resource.info at the network perimeter and DNS level immediately. Users who may have accessed this domain are advised to scan endpoints for unauthorized data exfiltration, audit financial accounts for suspicious transactions, and reset compromised credentials. Given the domain's recent registration and lack of vendor detection, heightened vigilance is critical to prevent credential theft or financial fraud. Monitor lateral movement and correlate logs with known IOCs to detect potential compromise. Immediate action is strongly advised to mitigate risk exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-22 10:33:24
- Registrar: Dynadot Inc
- IP: 104.21.44.78

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/aabe7068-fb31-416e-af39-96328100844a
- PhishDestroy: https://phishdestroy.io/domain/national-invest-resource.info/
- LLM endpoint: https://phishdestroy.io/domain/national-invest-resource.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/national-invest-resource.info/
Last updated: 2026-03-23