investearn[.]com

Analysis indicates that the domain investearn.com is actively engaged in brand impersonation, specifically targeting Microsoft. The domain, registered through GoDaddy.com, LLC, was created on August 22, 2005, and currently resolves to the IP address 2a06:98c1:3121::3, which is located in the United States and is managed by Cloudflare, Inc. (AS13335). The site's page title, 'Investearn: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil,' suggests an investment platform, but this is likely a facade to lure unsuspecting users into a scam. The domain has been flagged by 1 out of 95 security vendors on VirusTotal and appears on two security blocklists, including PhishDestroy and ScamSniffer. The low Gridinsoft trust score of 39/100 further corroborates the domain's suspicious nature. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, which does not inherently indicate malice but may be used to lend false legitimacy to the site. Defenders should be cautious and monitor for any activity that involves this domain, as it poses a high risk of tech support scams. Given the domain's active status and the limited number of vendors flagging it, additional manual verification and scrutiny are recommended to identify specific indicators of compromise and to prevent potential user exploitation.