fintechinvestment[.]org

fintechinvestment.org was registered on February 21, 2026 through Global Domain Group LLC. The domain resolves to IP 103.224.212.110, which is hosted in Australia and assigned to Trellian Pty. Limited. Current analysis rates the threat as high, with the domain marked as active and listed on multiple blocklists. The page title returned by the web server is “Fintech Investment”, indicating a likely lure toward financial services.

Infrastructure observation shows the domain is served by LiteSpeed and uses a Let’s Encrypt TLS certificate with a standard expiry cycle. DNS is delegated to ns105.my-control-panel.com and ns106.my-control-panel.com. An MX record points to mail.fintechinvestment.org, suggesting the operators may conduct email‑based credential harvesting. The site loads HTTP 200 and incorporates YouTube embeds, Bootstrap, jQuery UI, jQuery, FancyBox, Popper, and the Smartsupp chat widget.

Threat intelligence flags this site as an investment‑type scam. Three out of ninety‑five security vendors on VirusTotal have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. The domain appears on four security blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. These indicators collectively confirm a coordinated phishing campaign targeting investors.

Defenders should block fintechinvestment.org at DNS and network layers, and add the associated IP address 103.224.212.110 to firewall deny lists. Email gateways must reject or quarantine messages sent to or from mail.fintechinvestment.org. Continuous monitoring of the hosting provider and rapid takedown requests are advised. End‑users should be warned that any unsolicited communications referencing “Fintech Investment” are likely fraudulent and should be ignored.