Is 24kfc.shop safe?
http://24kfc.shop/
Coveragestrong2 of 4 applicable core capabilities
24kfc.shop is an illicit marketplace selling controlled substances under the KFC brand name.
The site presents itself as a shop for 'treasures' (skarbiv) in Kyiv and Irpin, Ukraine, but the products are illegal drugs including cannabis ('shyshky') and mushrooms ('hryby'). It uses the KFC logo and directs buyers to a Telegram bot (@kfc_24_7_autobot) for card-to-card payments with a 15% commission.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
The site presents itself as a shop for 'treasures' (skarbiv) in Kyiv and Irpin, Ukraine, but the products are illegal drugs including cannabis ('shyshky') and mushrooms ('hryby'). It uses the KFC logo and directs buyers to a Telegram bot (@kfc_24_7_autobot) for card-to-card payments with a 15% commission.
Unauthorized KFC branding
The site displays the KFC Colonel Sanders logo in the top-left corner while selling illegal substances.
Telegram-based drug sales
The site lists products for Kyiv and Irpin with options for local pickup or mail delivery across Ukraine.
All purchases are routed through the Telegram bot @kfc_24_7_autobot with payment via direct card-to-card transfer carrying a 15% commission.
Antivirus flagging
At least one antivirus engine (Trustwave) has flagged the URL as suspicious.
Why the score is 1
Uses KFC logo and name without authorization to mask drug sales. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 96
detectionsSaved result - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 96
| Engine | Finding |
|---|---|
| TrustwaveSuspicious | suspicious |
All 96 engine results
- Trustwave - suspicious - Suspicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- ADMINUSLabs - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- alphaMountain.ai - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- Artists Against 419 - clean - Clean
- AutoShun - unrated - Clean
- Axur - unrated - Clean
- benkow.cc - clean - Clean
- Bfore.Ai PreCrime - unrated - Clean
- BitDefender - clean - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- Chong Lua Dao - clean - Clean
- CINS Army - clean - Clean
- Cluster25 - unrated - Clean
- CMC Threat Intelligence - clean - Clean
- CRDF - clean - Clean
- Criminal IP - clean - Clean
- CSIS Security Group - unrated - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- CyRadar - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - clean - Clean
- Dr.Web - clean - Clean
- EmergingThreats - clean - Clean
- Emsisoft - clean - Clean
- Ermes - unrated - Clean
- ESET - clean - Clean
- ESTsecurity - clean - Clean
- Feodo Tracker - clean - Clean
- Forcepoint ThreatSeeker - unrated - Clean
- Fortinet - clean - Clean
- Fortra - unrated - Clean
- G-Data - clean - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safe Browsing - clean - Clean
- GreenSnow - clean - Clean
- Gridinsoft - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- Kaspersky - clean - Clean
- Lionic - clean - Clean
- Lumu - unrated - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- malwares.com URL checker - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- Rising - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Seclookup - clean - Clean
- securolytics - clean - Clean
- Snort IP sample list - clean - Clean
- SOCRadar - unrated - Clean
- Sophos - clean - Clean
- Spam404 - clean - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- ThreatHive - clean - Clean
- Threatsourcing - clean - Clean
- Underworld - unrated - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- VIPRE - unrated - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Webroot - clean - Clean
- Xcitium Verdict Cloud - clean - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
KFC brand logo (Colonel Sanders) used in the top left corner. The site menu includes 'КРАМНИЦЯ' (Shop), 'КОНТАКТИ' (Contacts), 'СТАТУС ЗАМОВЛЕННЯ' (Order Status), 'ВІДГУКИ' (Reviews). The site displays options for 'Київ (готові скарби)' (Kyiv (ready treasures)), 'Ірпінь (готові скарби)' (Irpin (ready treasures)), and 'Відправки поштою' (Mail delivery).
What the captured page showed
3 observations- 01
KFC brand logo (Colonel Sanders) used in the top left corner.
- 02
The site menu includes 'КРАМНИЦЯ' (Shop), 'КОНТАКТИ' (Contacts), 'СТАТУС ЗАМОВЛЕННЯ' (Order Status), 'ВІДГУКИ' (Reviews).
- 03
The site displays options for 'Київ (готові скарби)' (Kyiv (ready treasures)), 'Ірпінь (готові скарби)' (Irpin (ready treasures)), and 'Відправки поштою' (Mail delivery).
03 · Investigation Story
Investigation story
What the site claims
Independent evidence classifies the site as shop, but the page's own claim could not be captured.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01Uses KFC logo and name without authorization to mask drug sales.
- 02Explicitly advertises cannabis, mushrooms, and other controlled substances.
- 031 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Web research findings
Independent findings for 24kfc.shop, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- KFC 24/7 - Миттєвий магазин покупок, скарбів Київ, Ірпінь. Відправлення по Україні. Telegram-бота @kfc_24_7_autobotopen
"KFC 24/7 - Миттєвий магазин покупок, скарбів Київ, Ірпінь. Відправлення по Україні. Telegram-бота @kfc_24_7_autobot"
- 24kfc.shop Київ, Ірпінь ШИШКИ, ГРИБИ | Ł₳ßℝℂ - Sekta Labopen
"24kfc.shop Київ, Ірпінь ШИШКИ, ГРИБИ"
- KFC 24/7 - Миттєвий магазин покупок, скарбів Київ, Ірпінь. Відправлення по Україні. Telegram-бота @kfc_24_7_autobotopen
"Оплата за допомогою карти (комісія 15%):(УВАГА, ОПЛАТА ВИКЛЮЧНО ПРАЦЮЄ З ПЕРЕКАЗАМИ З КАРТКИ НА КАРТУ"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domain24kfc.shop
- Redirects to24kfc.shop
Domain Timeline
- Sep 25, 2023Domain registered
First appeared in WHOIS records — 3.0 years old today.
- Sep 20, 2026Saved security review — Flagged as dangerous
The completed checks from this saved scan are detailed above.
24kfc.shop is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Domain & Encryption
Redirect Chain
- 1301http://24kfc.shop/
- 2302https://24kfc.shop/
- 3302https://24kfc.shop/
- 4302https://24kfc.shop/
- 5302https://24kfc.shop/
- 6302https://24kfc.shop/
- 7302https://24kfc.shop/
- 8302https://24kfc.shop/
- 9302https://24kfc.shop/
- 10302https://24kfc.shop/
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentunavailable
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
Additional evidence review
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Additional evidence review · Additional evidence review
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 96 engines flagged | Limited | Adverse | stale fallback · Sep 20, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | Not available |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | 3 visible observations saved with the page capture | Completed | No adverse finding | Not available |
| Independent research | 3 independent findings were saved | Completed | Adverse | Not available |
- Antivirus
- Result1 of 96 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · Sep 20, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailable
- FindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result3 visible observations saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Independent research
- Result3 independent findings were saved
- CompletionCompleted
- FindingAdverse
- FreshnessNot available
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is 24kfc.shop a scam or a legit online store?
Is 24kfc.shop safe to use?
What should I do if I already gave my details to 24kfc.shop?
Can I get my money back from 24kfc.shop?
I ordered from 24kfc.shop but nothing arrived — is it a fake shop?
How do I report 24kfc.shop?
Why does 24kfc.shop look legitimate if it's a scam?
Has 24kfc.shop been flagged by antivirus engines?
Is 24kfc.shop on any phishing or malware blacklists?
How old is the 24kfc.shop domain?
How often is the 24kfc.shop report updated?
08 · Final Verdict
Final verdict
24kfc.shop is an illicit marketplace selling controlled substances under the KFC brand name.
The site presents itself as a shop for 'treasures' (skarbiv) in Kyiv and Irpin, Ukraine, but the products are illegal drugs including cannabis ('shyshky') and mushrooms ('hryby'). It uses the KFC logo and directs buyers to a Telegram bot (@kfc_24_7_autobot) for card-to-card payments with a 15% commission.
09 · Community
