fidelityinvestmentprime[.]org

Analysis of www.fidelityinvestmentprime.org (registered March 06 2026 through Dynadot LLC) shows the site was taken offline prior to the report date of July 25 2026. The domain resolves to IP 198.251.84.200, an address owned by AS53667 FranTech Solutions in the United States. The authoritative nameservers are ns5.asurahosting.com and ns6.asurahosting.com, indicating hosting on Asura Hosting infrastructure. The site presented a TLS certificate issued by Let’s Encrypt (R13), confirming HTTPS availability while active.

Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme risk. The page title retrieved during the brief live period reads “Fidelity E-Trade – Home”, matching the listed scam type of Banking Phishing. Automated analysis detected a web‑stack comprising Three.js, YouTube embeds, Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, Modernizr and jQuery UI. VirusTotal recorded six positive detections out of ninety‑five scanned engines, and the domain appears on one public blocklist and has been added to the PhishDestroy blocklist.

These signals collectively confirm the domain’s use for credential‑stealing targeting customers of Fidelity and E‑Trade. Current evidence does not reveal the exact phishing page layout or payload; further forensic capture would be required to detail form fields or redirect mechanisms. Defenders should block the domain and its associated IP at perimeter firewalls, update URL filtering lists with the observed nameservers, and monitor for newly registered domains using similar naming patterns. Continuous re‑scanning of the IP range and registrar activity is recommended to detect potential re‑deployment.