fluentprofits[.]com

On July 23, 2026, fluentprofits.com was identified as an offline site that presented itself as a safe investment platform, as indicated by the page title “Fluent Profits – Safe investment with Fluent Profits”. The domain was registered on February 21 2026 and resolves to the IP address 74.50.67.3, which is hosted by Interserver, Inc. (AS19318) in the United States. The TLS certificate is issued by ZeroSSL ECC Domain Secure Site CA, confirming that the site used a valid‑looking HTTPS connection before being taken down. Passive DNS and host‑based checks reveal the presence of LiteSpeed web server, Smartsupp live‑chat widget, jQuery, CreateJS, and HTTP/3 support, a typical stack for commodity phishing pages.

Reputation services show that fluentprofits.com appears on three public security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans returned detections from eight of ninety‑three scanning engines, reinforcing the malicious classification. AlienVault OTX lists the domain in two separate threat‑intel pulses, further corroborating its association with investment‑related scams. The site is categorized as a generic phishing campaign that employs an investment‑scam narrative.

While the offline status prevents current content analysis, the collected artifacts are sufficient to confirm the domain’s role in a fraudulent investment operation. Defenders should continue to block the domain at network perimeter devices, update URL filtering and DNS sinkhole lists, and monitor for any re‑registration or resurrection of the IP address. Additional investigation could focus on any residual sub‑domains or related infrastructure that share the same IP or hosting provider. No further evidence about the payload or victim interaction is presently available.